523 lines
23 KiB
XML
523 lines
23 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
|
|
<!--
|
|
~ Copyright The WildFly Authors
|
|
~ SPDX-License-Identifier: Apache-2.0
|
|
-->
|
|
|
|
<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
|
|
targetNamespace="urn:jboss:domain:remoting:2.0"
|
|
xmlns="urn:jboss:domain:remoting:2.0"
|
|
elementFormDefault="qualified"
|
|
attributeFormDefault="unqualified"
|
|
version="2.0">
|
|
|
|
<!-- The remoting subsystem root element -->
|
|
<xs:element name="subsystem" type="subsystem"/>
|
|
|
|
<xs:complexType name="subsystem">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
The configuration of the Remoting subsystem.
|
|
|
|
The 'worker-thread-pool' element configures the worker thread pool.
|
|
The nested "connector" element(s) define connectors for this subsystem.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
<xs:sequence>
|
|
<xs:choice minOccurs="0" maxOccurs="1">
|
|
<xs:element name="worker-thread-pool" type="workerThreadsType">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
Deprecated and replaced with the 'endpoint' configuration that can reference a worker from the IO subsystem.
|
|
This is only supported for use in managed domain profiles whose servers are all running on
|
|
previous versions that do not support the 'endpoint' configuration. Use in a server
|
|
running a version after the introduction of the 'endpoint' configuration will result
|
|
in an error.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:element>
|
|
<xs:element name="endpoint" type="endpointType"></xs:element>
|
|
</xs:choice>
|
|
<xs:element name="connector" type="connector" minOccurs="0" maxOccurs="unbounded"/>
|
|
<xs:element name="http-connector" type="http-connector" minOccurs="0" maxOccurs="unbounded"/>
|
|
<xs:element name="outbound-connections" minOccurs="0" type="outbound-connectionsType" />
|
|
</xs:sequence>
|
|
</xs:complexType>
|
|
|
|
<xs:complexType name="workerThreadsType">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
Deprecated configuration of the worker thread pool.
|
|
|
|
Only supported for legacy servers in a managed domain.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
<xs:attribute name="read-threads" type="xs:integer" use="optional"/>
|
|
<xs:attribute name="write-threads" type="xs:integer" use="optional"/>
|
|
<xs:attribute name="task-core-threads" type="xs:integer" use="optional"/>
|
|
<xs:attribute name="task-max-threads" type="xs:integer" use="optional"/>
|
|
<xs:attribute name="task-keepalive" type="xs:integer" use="optional"/>
|
|
<xs:attribute name="task-limit" type="xs:integer" use="optional"/>
|
|
</xs:complexType>
|
|
|
|
|
|
<xs:complexType name="endpointType">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
Configures the remoting endpoint.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
<xs:attribute name="worker" type="xs:string" default="default">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
The name of the IO subsystem worker the endpoint should use.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:attribute>
|
|
|
|
<xs:attribute name="authorize-id" type="xs:string">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
The SASL authorization ID. Used as authentication user name to use if no authentication {@code CallbackHandler} is specified
|
|
and the selected SASL mechanism demands a user name.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:attribute>
|
|
<xs:attribute name="auth-realm" type="xs:string">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
The authentication realm to use if no authentication {@code CallbackHandler} is specified.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:attribute>
|
|
<xs:attribute name="sasl-protocol" type="xs:string" default="http-remoting">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[Where a SaslServer or SaslClient are created by default the protocol specified it 'remoting', this can be used to override this.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:attribute>
|
|
<xs:attribute name="max-outbound-message-size" type="xs:long" default="9223372036854775807">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[The maximum outbound message size to send. No messages larger than this well be transmitted; attempting to do so will cause an exception on the writing side.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:attribute>
|
|
<xs:attribute name="buffer-region-size" type="xs:positiveInteger">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[The size of allocated buffer regions.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:attribute>
|
|
<xs:attribute name="receive-buffer-size" type="xs:positiveInteger" default="8192">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[The size of the largest buffer that this endpoint will accept over a connection.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:attribute>
|
|
<xs:attribute name="authentication-retries" type="xs:positiveInteger" default="3">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[Specify the number of times a client is allowed to retry authentication before closing the connection.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:attribute>
|
|
<xs:attribute name="transmit-window-size" type="xs:positiveInteger" default="131072">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[The maximum window size of the transmit direction for connection channels, in bytes.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:attribute>
|
|
<xs:attribute name="max-outbound-messages" type="xs:positiveInteger" default="65535">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[The maximum number of outbound channels to support for a connection.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:attribute>
|
|
<xs:attribute name="send-buffer-size" type="xs:positiveInteger" default="8192">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[The size of the largest buffer that this endpoint will transmit over a connection.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:attribute>
|
|
<xs:attribute name="max-inbound-messages" type="xs:positiveInteger" default="80">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[The maximum number of inbound channels to support for a connection.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:attribute>
|
|
<xs:attribute name="receive-window-size" type="xs:positiveInteger" default="131072">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[The maximum window size of the receive direction for connection channels, in bytes.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:attribute>
|
|
<xs:attribute name="heartbeat-interval" type="xs:positiveInteger" default="2147483647">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[The interval to use for connection heartbeat, in milliseconds. If the connection is idle in the outbound direction\
|
|
for this amount of time, a ping message will be sent, which will trigger a corresponding reply message.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:attribute>
|
|
<xs:attribute name="max-inbound-message-size" type="xs:long" default="9223372036854775807">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[The maximum inbound message size to be allowed. Messages exceeding this size will cause an exception to be thrown on the reading side as well as the writing side.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:attribute>
|
|
<xs:attribute name="max-outbound-channels" type="xs:positiveInteger" default="40">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[The maximum number of concurrent outbound messages on a channel.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:attribute>
|
|
<xs:attribute name="max-inbound-channels" type="xs:positiveInteger" default="40">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[The maximum number of concurrent inbound messages on a channel.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:attribute>
|
|
<xs:attribute name="server-name">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[The server side of the connection passes it's name to the client in the initial greeting, by default the name is automatically discovered from the local address of the connection or it can be overridden using this.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
</xs:attribute>
|
|
</xs:complexType>
|
|
|
|
<xs:complexType name="connector">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
The configuration of a Remoting connector.
|
|
|
|
The "name" attribute specifies the unique name of this connector.
|
|
|
|
The "socket-binding" attribute specifies the name (or names) of the socket binding(s) to attach to.
|
|
|
|
The optional nested "sasl" element contains the SASL authentication configuration for this connector.
|
|
|
|
The optional nested "authentication-provider" element contains the name of the authentication provider to
|
|
use for incoming connections.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
<xs:all>
|
|
<xs:element name="sasl" type="sasl" minOccurs="0"/>
|
|
<xs:element name="authentication-provider" type="ref" minOccurs="0"/>
|
|
<xs:element name="properties" type="properties" minOccurs="0"/>
|
|
</xs:all>
|
|
<xs:attribute name="socket-binding" type="name-list" use="required"/>
|
|
<xs:attribute name="name" type="xs:string" use="required"/>
|
|
<xs:attribute name="security-realm" type="xs:string" use="optional"/>
|
|
</xs:complexType>
|
|
|
|
<xs:complexType name="http-connector">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
The configuration of a Remoting HTTP upgrade based connector.
|
|
|
|
The "name" attribute specifies the unique name of this connector.
|
|
|
|
The "connector-ref" specifies the name of the Undertow http connector to use.
|
|
|
|
The optional nested "sasl" element contains the SASL authentication configuration for this connector.
|
|
|
|
The optional nested "authentication-provider" element contains the name of the authentication provider to
|
|
use for incoming connections.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
<xs:all>
|
|
<xs:element name="sasl" type="sasl" minOccurs="0"/>
|
|
<xs:element name="authentication-provider" type="ref" minOccurs="0"/>
|
|
<xs:element name="properties" type="properties" minOccurs="0"/>
|
|
</xs:all>
|
|
<xs:attribute name="connector-ref" type="name-list" use="required"/>
|
|
<xs:attribute name="name" type="xs:string" use="required"/>
|
|
<xs:attribute name="security-realm" type="xs:string" use="optional"/>
|
|
</xs:complexType>
|
|
|
|
<xs:complexType name="sasl">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
The configuration of the SASL authentication layer for this server.
|
|
|
|
The optional nested "include-mechanisms" element contains a whitelist of allowed SASL mechanism names.
|
|
No mechanisms will be allowed which are not present in this list.
|
|
|
|
The optional nested "qop" element contains a list of quality-of-protection values, in decreasing order
|
|
of preference.
|
|
|
|
The optional nested "strength" element contains a list of cipher strength values, in decreasing order
|
|
of preference.
|
|
|
|
The optional nested "reuse-session" boolean element specifies whether or not the server should attempt
|
|
to reuse previously authenticated session information. The mechanism may or may not support such reuse,
|
|
and other factors may also prevent it.
|
|
|
|
The optional nested "server-auth" boolean element specifies whether the server should authenticate to the
|
|
client. Not all mechanisms may support this setting.
|
|
|
|
The optional nested "policy" boolean element specifies a policy to use to narrow down the available set
|
|
of mechanisms.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
<xs:all>
|
|
<xs:element name="include-mechanisms" type="name-listType" minOccurs="0"/>
|
|
<xs:element name="qop" type="qop-listType" minOccurs="0"/>
|
|
<xs:element name="strength" type="strength" minOccurs="0"/>
|
|
<xs:element name="reuse-session" type="boolean-element" minOccurs="0"/>
|
|
<xs:element name="server-auth" type="boolean-element" minOccurs="0"/>
|
|
<xs:element name="policy" type="policy" minOccurs="0"/>
|
|
<xs:element name="properties" type="properties" minOccurs="0"/>
|
|
</xs:all>
|
|
</xs:complexType>
|
|
|
|
<xs:complexType name="policy">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
Policy criteria items to use in order to choose a SASL mechanism.
|
|
|
|
The optional nested "forward-secrecy" element contains a boolean value which specifies whether mechanisms
|
|
that implement forward secrecy between sessions are required. Forward secrecy means that breaking into
|
|
one session will not automatically provide information for breaking into future sessions.
|
|
|
|
The optional nested "no-active" element contains a boolean value which specifies whether mechanisms
|
|
susceptible to active (non-dictionary) attacks are not permitted. "false" to permit, "true" to deny.
|
|
|
|
The optional nested "no-anonymous" element contains a boolean value which specifies whether mechanisms
|
|
that accept anonymous login are permitted. "false" to permit, "true" to deny.
|
|
|
|
The optional nested "no-dictionary" element contains a boolean value which specifies whether mechanisms
|
|
susceptible to passive dictionary attacks are permitted. "false" to permit, "true" to deny.
|
|
|
|
The optional nested "no-plain-text" element contains a boolean value which specifies whether mechanisms
|
|
susceptible to simple plain passive attacks (e.g., "PLAIN") are not permitted. "false" to permit, "true" to deny.
|
|
|
|
The optional nested "pass-credentials" element contains a boolean value which specifies whether
|
|
mechanisms that pass client credentials are required.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
<xs:all>
|
|
<xs:element name="forward-secrecy" type="boolean-element" minOccurs="0"/>
|
|
<xs:element name="no-active" type="boolean-element" minOccurs="0"/>
|
|
<xs:element name="no-anonymous" type="boolean-element" minOccurs="0"/>
|
|
<xs:element name="no-dictionary" type="boolean-element" minOccurs="0"/>
|
|
<xs:element name="no-plain-text" type="boolean-element" minOccurs="0"/>
|
|
<xs:element name="pass-credentials" type="boolean-element" minOccurs="0"/>
|
|
</xs:all>
|
|
</xs:complexType>
|
|
|
|
<xs:complexType name="boolean-element">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
An element specifying a boolean value.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
<xs:attribute name="value" type="xs:boolean" use="required"/>
|
|
</xs:complexType>
|
|
|
|
<xs:complexType name="name-listType">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
An element specifying a string list.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
<xs:attribute name="value" type="name-list" use="required"/>
|
|
</xs:complexType>
|
|
|
|
<xs:simpleType name="name-list">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
A set of string items.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
<xs:list itemType="xs:string"/>
|
|
</xs:simpleType>
|
|
|
|
<xs:complexType name="qop-listType">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
An element specifying a qop list.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
<xs:attribute name="value" type="qop-list" use="required"/>
|
|
</xs:complexType>
|
|
|
|
<xs:simpleType name="qop-list">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
The SASL quality-of-protection value list. See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#QOP
|
|
for more information.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
<xs:list>
|
|
<xs:simpleType>
|
|
<xs:restriction base="xs:token">
|
|
<xs:enumeration value="auth"/>
|
|
<xs:enumeration value="auth-int"/>
|
|
<xs:enumeration value="auth-conf"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
</xs:list>
|
|
</xs:simpleType>
|
|
|
|
<xs:simpleType name="strength">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
The SASL strength value list. See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#STRENGTH
|
|
for more information.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
<xs:list>
|
|
<xs:simpleType>
|
|
<xs:restriction base="xs:token">
|
|
<xs:enumeration value="low"/>
|
|
<xs:enumeration value="medium"/>
|
|
<xs:enumeration value="high"/>
|
|
</xs:restriction>
|
|
</xs:simpleType>
|
|
</xs:list>
|
|
</xs:simpleType>
|
|
|
|
<xs:complexType name="properties">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
A set of free-form properties.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
<xs:choice minOccurs="0" maxOccurs="unbounded">
|
|
<xs:element name="property" type="property"/>
|
|
</xs:choice>
|
|
</xs:complexType>
|
|
|
|
<xs:complexType name="property">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
A free-form property. The name is required; the value is optional.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
<xs:attribute name="name" type="xs:string" use="required"/>
|
|
<xs:attribute name="value" type="xs:string" use="optional"/>
|
|
</xs:complexType>
|
|
|
|
<xs:complexType name="ref">
|
|
<xs:annotation>
|
|
<xs:documentation>
|
|
<![CDATA[
|
|
A reference to another named service.
|
|
]]>
|
|
</xs:documentation>
|
|
</xs:annotation>
|
|
<xs:attribute name="name" type="xs:string" use="required"/>
|
|
</xs:complexType>
|
|
|
|
<xs:complexType name="outbound-connectionsType">
|
|
<xs:choice minOccurs="0" maxOccurs="unbounded">
|
|
<xs:element name="local-outbound-connection" type="local-outbound-connectionType" />
|
|
<xs:element name="remote-outbound-connection" type="remote-outbound-connectionType" />
|
|
<xs:element name="outbound-connection" type="outbound-connectionType" />
|
|
</xs:choice>
|
|
</xs:complexType>
|
|
|
|
<xs:complexType name="base-outbound-connectionType">
|
|
<xs:all>
|
|
<xs:element name="properties" type="properties" minOccurs="0"/>
|
|
</xs:all>
|
|
<xs:attribute name="name" type="xs:string" use="required"/>
|
|
</xs:complexType>
|
|
|
|
<xs:complexType name="outbound-connectionType">
|
|
<xs:complexContent>
|
|
<xs:extension base="base-outbound-connectionType">
|
|
<xs:attribute name="uri" type="xs:anyURI" use="required"/>
|
|
</xs:extension>
|
|
</xs:complexContent>
|
|
</xs:complexType>
|
|
|
|
<xs:complexType name="local-outbound-connectionType">
|
|
<xs:complexContent>
|
|
<xs:extension base="base-outbound-connectionType">
|
|
<xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
|
|
</xs:extension>
|
|
</xs:complexContent>
|
|
</xs:complexType>
|
|
|
|
<xs:complexType name="remote-outbound-connectionType">
|
|
<xs:complexContent>
|
|
<xs:extension base="base-outbound-connectionType">
|
|
<xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
|
|
<xs:attribute name="username" type="xs:string" use="optional"/>
|
|
<xs:attribute name="security-realm" type="xs:string" use="optional"/>
|
|
<xs:attribute name="protocol" type="xs:string" use="optional"/>
|
|
</xs:extension>
|
|
</xs:complexContent>
|
|
</xs:complexType>
|
|
|
|
</xs:schema>
|