thiloplanz/Dockerfile

## Dockerfile
#
#   This Dockerfile builds a container image with the WSO2 Identity Server configured for use on AWS.
#
#    It requires you to provide an RDS (using MySQL 5.5) and Amazon Directory Service.
#    The URL and credentials are passed in using environment variables (which you can give to the run
#    command or just add to the end of this file)
#
#    You only need to copy/download this Dockerfile. The other files are automatically downloaded
#    from this gist during the build.
#
FROM bastiaanb/docker-wso2is

RUN mv /opt/wso2is-5.0.0 /opt/wso2 && \
    wget -P /opt/wso2/repository/components/lib/ http://central.maven.org/maven2/mysql/mysql-connector-java/5.1.38/mysql-connector-java-5.1.38.jar && \
    git clone https://gist.github.com/4b230c9ac36ba01fb194.git /opt/gist

# split RUN here so that "git fetch" is executed when we change the checkout id
RUN git -C /opt/gist fetch && \
    git -C /opt/gist checkout 7b2730a1fd3861dcdfc577854a648403b3b47d10 && \
    cp /opt/gist/master-datasources.xml /opt/wso2/repository/conf/datasources/ && \
    cp /opt/gist/wso2server.sh /opt/wso2/bin/


ENTRYPOINT /opt/wso2/bin/wso2server.sh

# put your ENV here, if you want, otherwise pass it to "docker run"
#ENV WSO2_CARBON_DB_JDBC_URL=jdbc:mysql://SOMEHOST.rds.amazonaws.com:3306/identityservertest  \
# WSO2_CARBON_DB_USER=user             \
# WSO2_CARBON_DB_PASSWORD=password

## master-datasources.xml
<datasources-configuration xmlns:svns="http://org.wso2.securevault/configuration">

    <providers>
        <provider>org.wso2.carbon.ndatasource.rdbms.RDBMSDataSourceReader</provider>
    </providers>

    <datasources>

        <datasource>
              <name>WSO2_CARBON_DB</name>
              <description>The datasource used for registry and user manager</description>
              <jndiConfig>
                    <name>jdbc/WSO2CarbonDB</name>
              </jndiConfig>
              <definition type="RDBMS">
                    <configuration>
                        <url>${WSO2_CARBON_DB_JDBC_URL}</url>
                        <username>${WSO2_CARBON_DB_USER}</username>
                        <password>${WSO2_CARBON_DB_PASSWORD}</password>
                        <driverClassName>com.mysql.jdbc.Driver</driverClassName>
               		<maxActive>80</maxActive>
               		<maxWait>60000</maxWait>
               		<minIdle>5</minIdle>
               		<testOnBorrow>true</testOnBorrow>
               		<validationQuery>SELECT 1</validationQuery>
               		<validationInterval>30000</validationInterval>
                   </configuration>
               </definition>
        </datasource>

    </datasources>

</datasources-configuration>

## stunnel.cert
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

## user-mgt.xml
<!--
  ~ Copyright WSO2, Inc. (http://wso2.com)
  ~
  ~ Licensed under the Apache License, Version 2.0 (the "License");
  ~ you may not use this file except in compliance with the License.
  ~ You may obtain a copy of the License at
  ~
  ~ http://www.apache.org/licenses/LICENSE-2.0
  ~
  ~ Unless required by applicable law or agreed to in writing, software
  ~ distributed under the License is distributed on an "AS IS" BASIS,
  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  ~ See the License for the specific language governing permissions and
  ~ limitations under the License.
  -->

<UserManager>
    <Realm>
        <Configuration>
		<AddAdmin>false</AddAdmin>
                <AdminRole>admin</AdminRole>
                <AdminUser>
                     <UserName>${WSO2_CARBON_LDAP_USER}</UserName>
                     <Password>admin</Password>
                </AdminUser>
            <EveryOneRoleName>everyone</EveryOneRoleName> <!-- By default users in this role sees the registry root -->
            <Property name="dataSource">jdbc/WSO2CarbonDB</Property>
        </Configuration>

	<!-- Active directory configuration is as follows.
	    In case if user core cache domain is needed to identify uniquely set property <Property name="UserCoreCacheIdentifier">domain</Property>
	    There are few special properties for "Active Directory".
	    They are :
	    1.Referral - (comment out this property if this feature is not reuired) This enables LDAP referral support.
	    2.BackLinksEnabled - (Do not comment, set to true or false) In some cases LDAP works with BackLinksEnabled. In which role is stored
	     at user level. Depending on this value we need to change the Search Base within code.
	    3.isADLDSRole - (Do not comment) Set to true if connecting to an AD LDS instance else set to false.
	-->
	<UserStoreManager class="org.wso2.carbon.user.core.ldap.ActiveDirectoryUserStoreManager">
            <Property name="TenantManager">org.wso2.carbon.user.core.tenant.CommonHybridLDAPTenantManager</Property>
            <Property name="defaultRealmName">${WSO2_CARBON_LDAP_REALM}</Property>
            <Property name="Disabled">false</Property>
            <Property name="kdcEnabled">false</Property>
            <Property name="ConnectionURL">ldaps://127.0.0.1:8636</Property>
            <Property name="ConnectionName">CN=${WSO2_CARBON_LDAP_USER},CN=users,${WSO2_CARBON_LDAP_DC}</Property>
            <Property name="ConnectionPassword">${WSO2_CARBON_LDAP_PASSWORD}</Property>
	    <Property name="passwordHashMethod">PLAIN_TEXT</Property>
            <Property name="UserSearchBase">CN=users,${WSO2_CARBON_LDAP_DC}</Property>
            <Property name="UserEntryObjectClass">user</Property>
            <Property name="UserNameAttribute">sAMAccountName</Property>
            <Property name="isADLDSRole">true</Property>
	    <Property name="userAccountControl">512</Property>
            <Property name="UserNameListFilter">(objectClass=user)</Property>
	    <Property name="UserNameSearchFilter">(&amp;(objectClass=user)(sAMAccountName=?))</Property>
            <Property name="UsernameJavaRegEx">[a-zA-Z0-9._-|//]{3,30}$</Property>
            <Property name="UsernameJavaScriptRegEx">^[\S]{3,30}$</Property>
            <Property name="PasswordJavaScriptRegEx">^[\S]{5,30}$</Property>
	    <Property name="RolenameJavaScriptRegEx">^[\S]{3,30}$</Property>
            <Property name="RolenameJavaRegEx">[a-zA-Z0-9._-|//]{3,30}$</Property>
	    <Property name="ReadGroups">false</Property>
	    <Property name="WriteGroups">true</Property>
	    <Property name="EmptyRolesAllowed">true</Property>
            <Property name="GroupSearchBase">CN=users,${WSO2_CARBON_LDAP_DC}</Property>
	    <Property name="GroupEntryObjectClass">group</Property>
            <Property name="GroupNameAttribute">cn</Property>
            <Property name="SharedGroupNameAttribute">cn</Property>
            <Property name="SharedGroupSearchBase">ou=SharedGroups,${WSO2_CARBON_LDAP_DC}</Property>
            <Property name="SharedGroupEntryObjectClass">groups</Property>
            <Property name="SharedTenantNameListFilter">(object=organizationalUnit)</Property>
            <Property name="SharedTenantNameAttribute">ou</Property>
            <Property name="SharedTenantObjectClass">organizationalUnit</Property>
            <Property name="MembershipAttribute">member</Property>
            <Property name="GroupNameListFilter">(objectcategory=group)</Property>
	    <Property name="GroupNameSearchFilter">(&amp;(objectClass=group)(cn=?))</Property>
            <Property name="UserRolesCacheEnabled">false</Property>
            <Property name="Referral">follow</Property>
	    <Property name="BackLinksEnabled">true</Property>
            <Property name="MaxRoleNameListLength">100</Property>
            <Property name="MaxUserNameListLength">100</Property>
            <Property name="SCIMEnabled">false</Property>
        </UserStoreManager>


        <AuthorizationManager
            class="org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager">
            <Property name="AdminRoleManagementPermissions">/permission</Property>
	    <Property name="AuthorizationCacheEnabled">true</Property>
        </AuthorizationManager>
    </Realm>
</UserManager>

<!--*******Description of some of the configuration properties used in user-mgt.xml*********************************

DomainName - This property must be used by all secondary user store managers in multiple user store configuration.
	     DomainName is a unique identifier given to the user store. Users must provide both the domain name and
	     username at log-in as "DomainName\Username"

UserRolesCacheEnabled - This is to indicate whether to cache role list of a user. By default it is set to true.
                        You may need to disable it if user-roles are changed by external means and need to reflect
                        those changes in the carbon product immediately.

ReplaceEscapeCharactersAtUserLogin - This is to configure whether escape characters in user name needs to be replaced at user login.
				     Currently the identified escape characters that needs to be replaced are '\' & '\\'

UserDNPattern - This property will be used when authenticating users. During authentication we do a bind. But if the user is login with
                email address or some other property we need to first lookup LDAP and retreive DN for the user. This involves an additional step.
                If UserDNPattern is specified the DN will be contructed using the pattern specified in this property. Performance of this is much better than looking
                up DN and binding user.

RoleDNPattern - This property will be used when checking whether user has been assigned to a given role. Rather than searching the role in search base, by
                using this property direct search can be done.

passwordHashMethod - This says how the password should be stored. Allowed values are as follows,
                     SHA - Uses SHA digest method
                     MD5 - Uses MD 5 digest method
                     PLAIN_TEXT - Plain text passwords
                     In addition to above this supports all digest methods supported by http://docs.oracle.com/javase/6/docs/api/java/security/MessageDigest.html.

DisplayNameAttribute - this is to have a dedicated LDAP attribute to display an entity(User/Role) in UI, in addition to the UserNameAttribute which is used for IS-UserStore interactions.
-->

## wso2server.sh
#!/bin/sh
# chkconfig: 345 99 01
# description: WSO2 Identity Server

# ----------------------------------------------------------------------------
#  Copyright 2005-2012 WSO2, Inc. http://www.wso2.org
#
#  Licensed under the Apache License, Version 2.0 (the "License");
#  you may not use this file except in compliance with the License.
#  You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
#  Unless required by applicable law or agreed to in writing, software
#  distributed under the License is distributed on an "AS IS" BASIS,
#  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#  See the License for the specific language governing permissions and
#  limitations under the License.

# ----------------------------------------------------------------------------
# Main Script for the WSO2 Carbon Server
#
# Environment Variable Prequisites
#
#   CARBON_HOME   Home of WSO2 Carbon installation. If not set I will  try
#                   to figure it out.
#
#   JAVA_HOME       Must point at your Java Development Kit installation.
#
#   JAVA_OPTS       (Optional) Java runtime options used when the commands
#                   is executed.
#
# NOTE: Borrowed generously from Apache Tomcat startup scripts.
# -----------------------------------------------------------------------------

# OS specific support.  $var _must_ be set to either true or false.
#ulimit -n 100000

cygwin=false;
darwin=false;
os400=false;
mingw=false;
case "`uname`" in
CYGWIN*) cygwin=true;;
MINGW*) mingw=true;;
OS400*) os400=true;;
Darwin*) darwin=true
        if [ -z "$JAVA_VERSION" ] ; then
             JAVA_VERSION="CurrentJDK"
           else
             echo "Using Java version: $JAVA_VERSION"
           fi
           if [ -z "$JAVA_HOME" ] ; then
             JAVA_HOME=/System/Library/Frameworks/JavaVM.framework/Versions/${JAVA_VERSION}/Home
           fi
           ;;
esac

# resolve links - $0 may be a softlink
PRG="$0"

while [ -h "$PRG" ]; do
  ls=`ls -ld "$PRG"`
  link=`expr "$ls" : '.*-> \(.*\)$'`
  if expr "$link" : '.*/.*' > /dev/null; then
    PRG="$link"
  else
    PRG=`dirname "$PRG"`/"$link"
  fi
done

# Get standard environment variables
PRGDIR=`dirname "$PRG"`

# Only set CARBON_HOME if not already set
[ -z "$CARBON_HOME" ] && CARBON_HOME=`cd "$PRGDIR/.." ; pwd`

# Set AXIS2_HOME. Needed for One Click JAR Download
AXIS2_HOME=$CARBON_HOME

# For Cygwin, ensure paths are in UNIX format before anything is touched
if $cygwin; then
  [ -n "$JAVA_HOME" ] && JAVA_HOME=`cygpath --unix "$JAVA_HOME"`
  [ -n "$CARBON_HOME" ] && CARBON_HOME=`cygpath --unix "$CARBON_HOME"`
  [ -n "$AXIS2_HOME" ] && CARBON_HOME=`cygpath --unix "$CARBON_HOME"`
fi

# For OS400
if $os400; then
  # Set job priority to standard for interactive (interactive - 6) by using
  # the interactive priority - 6, the helper threads that respond to requests
  # will be running at the same priority as interactive jobs.
  COMMAND='chgjob job('$JOBNAME') runpty(6)'
  system $COMMAND

  # Enable multi threading
  QIBM_MULTI_THREADED=Y
  export QIBM_MULTI_THREADED
fi

# For Migwn, ensure paths are in UNIX format before anything is touched
if $mingw ; then
  [ -n "$CARBON_HOME" ] &&
    CARBON_HOME="`(cd "$CARBON_HOME"; pwd)`"
  [ -n "$JAVA_HOME" ] &&
    JAVA_HOME="`(cd "$JAVA_HOME"; pwd)`"
  [ -n "$AXIS2_HOME" ] &&
    CARBON_HOME="`(cd "$CARBON_HOME"; pwd)`"
  # TODO classpath?
fi

if [ -z "$JAVACMD" ] ; then
  if [ -n "$JAVA_HOME"  ] ; then
    if [ -x "$JAVA_HOME/jre/sh/java" ] ; then
      # IBM's JDK on AIX uses strange locations for the executables
      JAVACMD="$JAVA_HOME/jre/sh/java"
    else
      JAVACMD="$JAVA_HOME/bin/java"
    fi
  else
    JAVACMD=java
  fi
fi

if [ ! -x "$JAVACMD" ] ; then
  echo "Error: JAVA_HOME is not defined correctly."
  echo " CARBON cannot execute $JAVACMD"
  exit 1
fi

# if JAVA_HOME is not set we're not happy
if [ -z "$JAVA_HOME" ]; then
  echo "You must set the JAVA_HOME variable before running CARBON."
  exit 1
fi

if [ -e "$CARBON_HOME/wso2carbon.pid" ]; then
  PID=`cat "$CARBON_HOME"/wso2carbon.pid`
fi

# ----- Process the input command ----------------------------------------------
args=""
for c in $*
do
    if [ "$c" = "--debug" ] || [ "$c" = "-debug" ] || [ "$c" = "debug" ]; then
          CMD="--debug"
          continue
    elif [ "$CMD" = "--debug" ]; then
          if [ -z "$PORT" ]; then
                PORT=$c
          fi
    elif [ "$c" = "--stop" ] || [ "$c" = "-stop" ] || [ "$c" = "stop" ]; then
          CMD="stop"
    elif [ "$c" = "--start" ] || [ "$c" = "-start" ] || [ "$c" = "start" ]; then
          CMD="start"
    elif [ "$c" = "--version" ] || [ "$c" = "-version" ] || [ "$c" = "version" ]; then
          CMD="version"
    elif [ "$c" = "--restart" ] || [ "$c" = "-restart" ] || [ "$c" = "restart" ]; then
          CMD="restart"
    elif [ "$c" = "--test" ] || [ "$c" = "-test" ] || [ "$c" = "test" ]; then
          CMD="test"
    else
        args="$args $c"
    fi
done

if [ "$CMD" = "--debug" ]; then
  if [ "$PORT" = "" ]; then
    echo " Please specify the debug port after the --debug option"
    exit 1
  fi
  if [ -n "$JAVA_OPTS" ]; then
    echo "Warning !!!. User specified JAVA_OPTS will be ignored, once you give the --debug option."
  fi
  CMD="RUN"
  JAVA_OPTS="-Xdebug -Xnoagent -Djava.compiler=NONE -Xrunjdwp:transport=dt_socket,server=y,suspend=y,address=$PORT"
  echo "Please start the remote debugging client to continue..."
elif [ "$CMD" = "start" ]; then
  if [ -e "$CARBON_HOME/wso2carbon.pid" ]; then
    if  ps -p $PID >&- ; then
      echo "Process is already running"
      exit 0
    fi
  fi
  export CARBON_HOME=$CARBON_HOME
# using nohup bash to avoid erros in solaris OS.TODO
  nohup bash $CARBON_HOME/bin/wso2server.sh $args > /dev/null 2>&1 &
  exit 0
elif [ "$CMD" = "stop" ]; then
  export CARBON_HOME=$CARBON_HOME
  kill -term `cat $CARBON_HOME/wso2carbon.pid`
  exit 0
elif [ "$CMD" = "restart" ]; then
  export CARBON_HOME=$CARBON_HOME
  kill -term `cat $CARBON_HOME/wso2carbon.pid`
  process_status=0
  pid=`cat $CARBON_HOME/wso2carbon.pid`
  while [ "$process_status" -eq "0" ]
  do
        sleep 1;
        ps -p$pid 2>&1 > /dev/null
        process_status=$?
  done

# using nohup bash to avoid erros in solaris OS.TODO
  nohup bash $CARBON_HOME/bin/wso2server.sh $args > /dev/null 2>&1 &
  exit 0
elif [ "$CMD" = "test" ]; then
    JAVACMD="exec "$JAVACMD""
elif [ "$CMD" = "version" ]; then
  cat $CARBON_HOME/bin/version.txt
  cat $CARBON_HOME/bin/wso2carbon-version.txt
  exit 0
fi

# ---------- Handle the SSL Issue with proper JDK version --------------------
jdk_16=`$JAVA_HOME/bin/java -version 2>&1 | grep "1.[6|7]"`
if [ "$jdk_16" = "" ]; then
   echo " Starting WSO2 Carbon (in unsupported JDK)"
   echo " [ERROR] CARBON is supported only on JDK 1.6 and 1.7"
fi

CARBON_XBOOTCLASSPATH=""
for f in "$CARBON_HOME"/lib/xboot/*.jar
do
    if [ "$f" != "$CARBON_HOME/lib/xboot/*.jar" ];then
        CARBON_XBOOTCLASSPATH="$CARBON_XBOOTCLASSPATH":$f
    fi
done

JAVA_ENDORSED_DIRS="$CARBON_HOME/lib/endorsed":"$JAVA_HOME/jre/lib/endorsed":"$JAVA_HOME/lib/endorsed"

CARBON_CLASSPATH=""
if [ -e "$JAVA_HOME/lib/tools.jar" ]; then
    CARBON_CLASSPATH="$JAVA_HOME/lib/tools.jar"
fi
for f in "$CARBON_HOME"/bin/*.jar
do
    if [ "$f" != "$CARBON_HOME/bin/*.jar" ];then
        CARBON_CLASSPATH="$CARBON_CLASSPATH":$f
    fi
done
for t in "$CARBON_HOME"/lib/commons-lang*.jar
do
    CARBON_CLASSPATH="$CARBON_CLASSPATH":$t
done
# For Cygwin, switch paths to Windows format before running java
if $cygwin; then
  JAVA_HOME=`cygpath --absolute --windows "$JAVA_HOME"`
  CARBON_HOME=`cygpath --absolute --windows "$CARBON_HOME"`
  AXIS2_HOME=`cygpath --absolute --windows "$CARBON_HOME"`
  CLASSPATH=`cygpath --path --windows "$CLASSPATH"`
  JAVA_ENDORSED_DIRS=`cygpath --path --windows "$JAVA_ENDORSED_DIRS"`
  CARBON_CLASSPATH=`cygpath --path --windows "$CARBON_CLASSPATH"`
  CARBON_XBOOTCLASSPATH=`cygpath --path --windows "$CARBON_XBOOTCLASSPATH"`
fi

# ----- Execute The Requested Command -----------------------------------------

echo JAVA_HOME environment variable is set to $JAVA_HOME
echo CARBON_HOME environment variable is set to $CARBON_HOME

cd "$CARBON_HOME"

START_EXIT_STATUS=121
status=$START_EXIT_STATUS

#To monitor a Carbon server in remote JMX mode on linux host machines, set the below system property.
#   -Djava.rmi.server.hostname="your.IP.goes.here"

while [ "$status" = "$START_EXIT_STATUS" ]
do
    $JAVACMD \
    -Xbootclasspath/a:"$CARBON_XBOOTCLASSPATH" \
    -Xms256m -Xmx1024m -XX:MaxPermSize=256m \
    -XX:+HeapDumpOnOutOfMemoryError \
    -XX:HeapDumpPath="$CARBON_HOME/repository/logs/heap-dump.hprof" \
    $JAVA_OPTS \
    -Dcom.sun.management.jmxremote \
    -classpath "$CARBON_CLASSPATH" \
    -Djava.endorsed.dirs="$JAVA_ENDORSED_DIRS" \
    -Djava.io.tmpdir="$CARBON_HOME/tmp" \
    -Dcatalina.base="$CARBON_HOME/lib/tomcat" \
    -Dwso2.server.standalone=true \
    -Dcarbon.registry.root=/ \
    -Djava.command="$JAVACMD" \
    -Dcarbon.home="$CARBON_HOME" \
    -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager \
    -Dcarbon.config.dir.path="$CARBON_HOME/repository/conf" \
    -Djava.util.logging.config.file="$CARBON_HOME/repository/conf/etc/logging-bridge.properties" \
    -Dcomponents.repo="$CARBON_HOME/repository/components/plugins" \
    -Dconf.location="$CARBON_HOME/repository/conf"\
    -Dcom.atomikos.icatch.file="$CARBON_HOME/lib/transactions.properties" \
    -Dcom.atomikos.icatch.hide_init_file_path=true \
    -Dorg.apache.jasper.runtime.BodyContentImpl.LIMIT_BUFFER=true \
    -Dcom.sun.jndi.ldap.connect.pool.authentication=simple  \
    -Dcom.sun.jndi.ldap.connect.pool.timeout=3000  \
    -Dorg.terracotta.quartz.skipUpdateCheck=true \
    -Djava.security.egd=file:/dev/./urandom \
    -Dfile.encoding=UTF8 \
    -DWSO2_CARBON_DB_JDBC_URL=$WSO2_CARBON_DB_JDBC_URL \
    -DWSO2_CARBON_DB_USER=$WSO2_CARBON_DB_USER \
    -DWSO2_CARBON_DB_PASSWORD=$WSO2_CARBON_DB_PASSWORD \
    org.wso2.carbon.bootstrap.Bootstrap $*
    status=$?
done
	#
	# This Dockerfile builds a container image with the WSO2 Identity Server configured for use on AWS.
	#
	# It requires you to provide an RDS (using MySQL 5.5) and Amazon Directory Service.
	# The URL and credentials are passed in using environment variables (which you can give to the run
	# command or just add to the end of this file)
	#
	# You only need to copy/download this Dockerfile. The other files are automatically downloaded
	# from this gist during the build.
	#
	FROM bastiaanb/docker-wso2is

	RUN mv /opt/wso2is-5.0.0 /opt/wso2 && \
	wget -P /opt/wso2/repository/components/lib/ http://central.maven.org/maven2/mysql/mysql-connector-java/5.1.38/mysql-connector-java-5.1.38.jar && \
	git clone https://gist.github.com/4b230c9ac36ba01fb194.git /opt/gist

	# split RUN here so that "git fetch" is executed when we change the checkout id
	RUN git -C /opt/gist fetch && \
	git -C /opt/gist checkout 7b2730a1fd3861dcdfc577854a648403b3b47d10 && \
	cp /opt/gist/master-datasources.xml /opt/wso2/repository/conf/datasources/ && \
	cp /opt/gist/wso2server.sh /opt/wso2/bin/


	ENTRYPOINT /opt/wso2/bin/wso2server.sh

	# put your ENV here, if you want, otherwise pass it to "docker run"
	#ENV WSO2_CARBON_DB_JDBC_URL=jdbc:mysql://SOMEHOST.rds.amazonaws.com:3306/identityservertest \
	# WSO2_CARBON_DB_USER=user \
	# WSO2_CARBON_DB_PASSWORD=password
	<datasources-configuration xmlns:svns="http://org.wso2.securevault/configuration">

	<providers>
	<provider>org.wso2.carbon.ndatasource.rdbms.RDBMSDataSourceReader</provider>
	</providers>

	<datasources>

	<datasource>
	<name>WSO2_CARBON_DB</name>
	<description>The datasource used for registry and user manager</description>
	<jndiConfig>
	<name>jdbc/WSO2CarbonDB</name>
	</jndiConfig>
	<definition type="RDBMS">
	<configuration>
	<url>${WSO2_CARBON_DB_JDBC_URL}</url>
	<username>${WSO2_CARBON_DB_USER}</username>
	<password>${WSO2_CARBON_DB_PASSWORD}</password>
	<driverClassName>com.mysql.jdbc.Driver</driverClassName>
	<maxActive>80</maxActive>
	<maxWait>60000</maxWait>
	<minIdle>5</minIdle>
	<testOnBorrow>true</testOnBorrow>
	<validationQuery>SELECT 1</validationQuery>
	<validationInterval>30000</validationInterval>
	</configuration>
	</definition>
	</datasource>

	</datasources>

	</datasources-configuration>
	-----BEGIN CERTIFICATE-----
	MIIDVzCCAj+gAwIBAgIJALEKML8hvlVeMA0GCSqGSIb3DQEBCwUAMEIxCzAJBgNV
	BAYTAlhYMRUwEwYDVQQHDAxEZWZhdWx0IENpdHkxHDAaBgNVBAoME0RlZmF1bHQg
	Q29tcGFueSBMdGQwHhcNMTUxMjE2MDgwNzMyWhcNMTYxMjE1MDgwNzMyWjBCMQsw
	CQYDVQQGEwJYWDEVMBMGA1UEBwwMRGVmYXVsdCBDaXR5MRwwGgYDVQQKDBNEZWZh
	dWx0IENvbXBhbnkgTHRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
	5q/Dtkc0Uu2J0jTAvNdpWxq7QaU0dHKgpJ8uVKvAJQcz2RJWBqkLUjXZQdbUtAHr
	DBAzbgwgumUdOB8zZKfcFHLLIgC5AyNTEZcR9bEgV/eG/y4wR0eCLpVoA1k1Nj1u
	aqu2p/7XkHTV4y08eUYONTbPFesLovfey1eoSp3IlBRVyDsGSPHH9kbAFHr4yyvk
	kveorxBacVv5r1cNlqVeZpAgS9IfpwRayTnFPrQeGLM5NRAOUG+XNU8xjXHAJQHg
	0GrDSPufteGM9x4PYBAzO3DLsufwMYdTlhd0J4H+v5+edTNOpiqIGq935Ygxi+FK
	MeaZAxcgJWMT19gRl87xvwIDAQABo1AwTjAdBgNVHQ4EFgQUR7pG6u8fP1Q/IcG7
	h9R5aTCZ94owHwYDVR0jBBgwFoAUR7pG6u8fP1Q/IcG7h9R5aTCZ94owDAYDVR0T
	BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAXiqgdRENa7Wl5ZcvlBw9Cfv0vkh9
	Vvg1Xjup20agRQDk1KcsBJ1sxp2VQREc/0LQZXKIE4GHqszy9YjFp5CCi7dShlcm
	VdxJACMPztTJM5/r/0AIYXQjWw5FwuLHssALpyQInyr2y2a5fMwUCe8JhdTMesuL
	ECXu8mheFnRS0AgCSEuG0HGMBdCEXff20g83+mWGCFTwbpsHtsKdjggD0V0MsWqv
	tu+V27537BUTW3nm8AaGp5D8lypknZyOubqgWKRZwY9V/vN+S13T/Put9hgU65JH
	QjV6zFXAx4FY11wkrn0yRiuieLM0FRj/RLdQvSPl99WccD+YYd7AKI5Vsg==
	-----END CERTIFICATE-----
	<!--
	~ Copyright WSO2, Inc. (http://wso2.com)
	~
	~ Licensed under the Apache License, Version 2.0 (the "License");
	~ you may not use this file except in compliance with the License.
	~ You may obtain a copy of the License at
	~
	~ http://www.apache.org/licenses/LICENSE-2.0
	~
	~ Unless required by applicable law or agreed to in writing, software
	~ distributed under the License is distributed on an "AS IS" BASIS,
	~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
	~ See the License for the specific language governing permissions and
	~ limitations under the License.
	-->

	<UserManager>
	<Realm>
	<Configuration>
	<AddAdmin>false</AddAdmin>
	<AdminRole>admin</AdminRole>
	<AdminUser>
	<UserName>${WSO2_CARBON_LDAP_USER}</UserName>
	<Password>admin</Password>
	</AdminUser>
	<EveryOneRoleName>everyone</EveryOneRoleName> <!-- By default users in this role sees the registry root -->
	<Property name="dataSource">jdbc/WSO2CarbonDB</Property>
	</Configuration>

	<!-- Active directory configuration is as follows.
	In case if user core cache domain is needed to identify uniquely set property <Property name="UserCoreCacheIdentifier">domain</Property>
	There are few special properties for "Active Directory".
	They are :
	1.Referral - (comment out this property if this feature is not reuired) This enables LDAP referral support.
	2.BackLinksEnabled - (Do not comment, set to true or false) In some cases LDAP works with BackLinksEnabled. In which role is stored
	at user level. Depending on this value we need to change the Search Base within code.
	3.isADLDSRole - (Do not comment) Set to true if connecting to an AD LDS instance else set to false.
	-->
	<UserStoreManager class="org.wso2.carbon.user.core.ldap.ActiveDirectoryUserStoreManager">
	<Property name="TenantManager">org.wso2.carbon.user.core.tenant.CommonHybridLDAPTenantManager</Property>
	<Property name="defaultRealmName">${WSO2_CARBON_LDAP_REALM}</Property>
	<Property name="Disabled">false</Property>
	<Property name="kdcEnabled">false</Property>
	<Property name="ConnectionURL">ldaps://127.0.0.1:8636</Property>
	<Property name="ConnectionName">CN=${WSO2_CARBON_LDAP_USER},CN=users,${WSO2_CARBON_LDAP_DC}</Property>
	<Property name="ConnectionPassword">${WSO2_CARBON_LDAP_PASSWORD}</Property>
	<Property name="passwordHashMethod">PLAIN_TEXT</Property>
	<Property name="UserSearchBase">CN=users,${WSO2_CARBON_LDAP_DC}</Property>
	<Property name="UserEntryObjectClass">user</Property>
	<Property name="UserNameAttribute">sAMAccountName</Property>
	<Property name="isADLDSRole">true</Property>
	<Property name="userAccountControl">512</Property>
	<Property name="UserNameListFilter">(objectClass=user)</Property>
	<Property name="UserNameSearchFilter">(&(objectClass=user)(sAMAccountName=?))</Property>
	<Property name="UsernameJavaRegEx">[a-zA-Z0-9._-\|//]{3,30}$</Property>
	<Property name="UsernameJavaScriptRegEx">^[\S]{3,30}$</Property>
	<Property name="PasswordJavaScriptRegEx">^[\S]{5,30}$</Property>
	<Property name="RolenameJavaScriptRegEx">^[\S]{3,30}$</Property>
	<Property name="RolenameJavaRegEx">[a-zA-Z0-9._-\|//]{3,30}$</Property>
	<Property name="ReadGroups">false</Property>
	<Property name="WriteGroups">true</Property>
	<Property name="EmptyRolesAllowed">true</Property>
	<Property name="GroupSearchBase">CN=users,${WSO2_CARBON_LDAP_DC}</Property>
	<Property name="GroupEntryObjectClass">group</Property>
	<Property name="GroupNameAttribute">cn</Property>
	<Property name="SharedGroupNameAttribute">cn</Property>
	<Property name="SharedGroupSearchBase">ou=SharedGroups,${WSO2_CARBON_LDAP_DC}</Property>
	<Property name="SharedGroupEntryObjectClass">groups</Property>
	<Property name="SharedTenantNameListFilter">(object=organizationalUnit)</Property>
	<Property name="SharedTenantNameAttribute">ou</Property>
	<Property name="SharedTenantObjectClass">organizationalUnit</Property>
	<Property name="MembershipAttribute">member</Property>
	<Property name="GroupNameListFilter">(objectcategory=group)</Property>
	<Property name="GroupNameSearchFilter">(&(objectClass=group)(cn=?))</Property>
	<Property name="UserRolesCacheEnabled">false</Property>
	<Property name="Referral">follow</Property>
	<Property name="BackLinksEnabled">true</Property>
	<Property name="MaxRoleNameListLength">100</Property>
	<Property name="MaxUserNameListLength">100</Property>
	<Property name="SCIMEnabled">false</Property>
	</UserStoreManager>


	<AuthorizationManager
	class="org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager">
	<Property name="AdminRoleManagementPermissions">/permission</Property>
	<Property name="AuthorizationCacheEnabled">true</Property>
	</AuthorizationManager>
	</Realm>
	</UserManager>

	<!--*****Description of some of the configuration properties used in user-mgt.xml*******************************

	DomainName - This property must be used by all secondary user store managers in multiple user store configuration.
	DomainName is a unique identifier given to the user store. Users must provide both the domain name and
	username at log-in as "DomainName\Username"

	UserRolesCacheEnabled - This is to indicate whether to cache role list of a user. By default it is set to true.
	You may need to disable it if user-roles are changed by external means and need to reflect
	those changes in the carbon product immediately.

	ReplaceEscapeCharactersAtUserLogin - This is to configure whether escape characters in user name needs to be replaced at user login.
	Currently the identified escape characters that needs to be replaced are '\' & '\\'

	UserDNPattern - This property will be used when authenticating users. During authentication we do a bind. But if the user is login with
	email address or some other property we need to first lookup LDAP and retreive DN for the user. This involves an additional step.
	If UserDNPattern is specified the DN will be contructed using the pattern specified in this property. Performance of this is much better than looking
	up DN and binding user.

	RoleDNPattern - This property will be used when checking whether user has been assigned to a given role. Rather than searching the role in search base, by
	using this property direct search can be done.

	passwordHashMethod - This says how the password should be stored. Allowed values are as follows,
	SHA - Uses SHA digest method
	MD5 - Uses MD 5 digest method
	PLAIN_TEXT - Plain text passwords
	In addition to above this supports all digest methods supported by http://docs.oracle.com/javase/6/docs/api/java/security/MessageDigest.html.

	DisplayNameAttribute - this is to have a dedicated LDAP attribute to display an entity(User/Role) in UI, in addition to the UserNameAttribute which is used for IS-UserStore interactions.
	-->
	#!/bin/sh
	# chkconfig: 345 99 01
	# description: WSO2 Identity Server

	# ----------------------------------------------------------------------------
	# Copyright 2005-2012 WSO2, Inc. http://www.wso2.org
	#
	# Licensed under the Apache License, Version 2.0 (the "License");
	# you may not use this file except in compliance with the License.
	# You may obtain a copy of the License at
	#
	# http://www.apache.org/licenses/LICENSE-2.0
	#
	# Unless required by applicable law or agreed to in writing, software
	# distributed under the License is distributed on an "AS IS" BASIS,
	# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
	# See the License for the specific language governing permissions and
	# limitations under the License.

	# ----------------------------------------------------------------------------
	# Main Script for the WSO2 Carbon Server
	#
	# Environment Variable Prequisites
	#
	# CARBON_HOME Home of WSO2 Carbon installation. If not set I will try
	# to figure it out.
	#
	# JAVA_HOME Must point at your Java Development Kit installation.
	#
	# JAVA_OPTS (Optional) Java runtime options used when the commands
	# is executed.
	#
	# NOTE: Borrowed generously from Apache Tomcat startup scripts.
	# -----------------------------------------------------------------------------

	# OS specific support. $var _must_ be set to either true or false.
	#ulimit -n 100000

	cygwin=false;
	darwin=false;
	os400=false;
	mingw=false;
	case "`uname`" in
	CYGWIN*) cygwin=true;;
	MINGW*) mingw=true;;
	OS400*) os400=true;;
	Darwin*) darwin=true
	if [ -z "$JAVA_VERSION" ] ; then
	JAVA_VERSION="CurrentJDK"
	else
	echo "Using Java version: $JAVA_VERSION"
	fi
	if [ -z "$JAVA_HOME" ] ; then
	JAVA_HOME=/System/Library/Frameworks/JavaVM.framework/Versions/${JAVA_VERSION}/Home
	fi
	;;
	esac

	# resolve links - $0 may be a softlink
	PRG="$0"

	while [ -h "$PRG" ]; do
	ls=`ls -ld "$PRG"`
	link=`expr "$ls" : '.-> \(.\)$'`
	if expr "$link" : './.' > /dev/null; then
	PRG="$link"
	else
	PRG=`dirname "$PRG"`/"$link"
	fi
	done

	# Get standard environment variables
	PRGDIR=`dirname "$PRG"`

	# Only set CARBON_HOME if not already set
	[ -z "$CARBON_HOME" ] && CARBON_HOME=`cd "$PRGDIR/.." ; pwd`

	# Set AXIS2_HOME. Needed for One Click JAR Download
	AXIS2_HOME=$CARBON_HOME

	# For Cygwin, ensure paths are in UNIX format before anything is touched
	if $cygwin; then
	[ -n "$JAVA_HOME" ] && JAVA_HOME=`cygpath --unix "$JAVA_HOME"`
	[ -n "$CARBON_HOME" ] && CARBON_HOME=`cygpath --unix "$CARBON_HOME"`
	[ -n "$AXIS2_HOME" ] && CARBON_HOME=`cygpath --unix "$CARBON_HOME"`
	fi

	# For OS400
	if $os400; then
	# Set job priority to standard for interactive (interactive - 6) by using
	# the interactive priority - 6, the helper threads that respond to requests
	# will be running at the same priority as interactive jobs.
	COMMAND='chgjob job('$JOBNAME') runpty(6)'
	system $COMMAND

	# Enable multi threading
	QIBM_MULTI_THREADED=Y
	export QIBM_MULTI_THREADED
	fi

	# For Migwn, ensure paths are in UNIX format before anything is touched
	if $mingw ; then
	[ -n "$CARBON_HOME" ] &&
	CARBON_HOME="`(cd "$CARBON_HOME"; pwd)`"
	[ -n "$JAVA_HOME" ] &&
	JAVA_HOME="`(cd "$JAVA_HOME"; pwd)`"
	[ -n "$AXIS2_HOME" ] &&
	CARBON_HOME="`(cd "$CARBON_HOME"; pwd)`"
	# TODO classpath?
	fi

	if [ -z "$JAVACMD" ] ; then
	if [ -n "$JAVA_HOME" ] ; then
	if [ -x "$JAVA_HOME/jre/sh/java" ] ; then
	# IBM's JDK on AIX uses strange locations for the executables
	JAVACMD="$JAVA_HOME/jre/sh/java"
	else
	JAVACMD="$JAVA_HOME/bin/java"
	fi
	else
	JAVACMD=java
	fi
	fi

	if [ ! -x "$JAVACMD" ] ; then
	echo "Error: JAVA_HOME is not defined correctly."
	echo " CARBON cannot execute $JAVACMD"
	exit 1
	fi

	# if JAVA_HOME is not set we're not happy
	if [ -z "$JAVA_HOME" ]; then
	echo "You must set the JAVA_HOME variable before running CARBON."
	exit 1
	fi

	if [ -e "$CARBON_HOME/wso2carbon.pid" ]; then
	PID=`cat "$CARBON_HOME"/wso2carbon.pid`
	fi

	# ----- Process the input command ----------------------------------------------
	args=""
	for c in $*
	do
	if [ "$c" = "--debug" ] \|\| [ "$c" = "-debug" ] \|\| [ "$c" = "debug" ]; then
	CMD="--debug"
	continue
	elif [ "$CMD" = "--debug" ]; then
	if [ -z "$PORT" ]; then
	PORT=$c
	fi
	elif [ "$c" = "--stop" ] \|\| [ "$c" = "-stop" ] \|\| [ "$c" = "stop" ]; then
	CMD="stop"
	elif [ "$c" = "--start" ] \|\| [ "$c" = "-start" ] \|\| [ "$c" = "start" ]; then
	CMD="start"
	elif [ "$c" = "--version" ] \|\| [ "$c" = "-version" ] \|\| [ "$c" = "version" ]; then
	CMD="version"
	elif [ "$c" = "--restart" ] \|\| [ "$c" = "-restart" ] \|\| [ "$c" = "restart" ]; then
	CMD="restart"
	elif [ "$c" = "--test" ] \|\| [ "$c" = "-test" ] \|\| [ "$c" = "test" ]; then
	CMD="test"
	else
	args="$args $c"
	fi
	done

	if [ "$CMD" = "--debug" ]; then
	if [ "$PORT" = "" ]; then
	echo " Please specify the debug port after the --debug option"
	exit 1
	fi
	if [ -n "$JAVA_OPTS" ]; then
	echo "Warning !!!. User specified JAVA_OPTS will be ignored, once you give the --debug option."
	fi
	CMD="RUN"
	JAVA_OPTS="-Xdebug -Xnoagent -Djava.compiler=NONE -Xrunjdwp:transport=dt_socket,server=y,suspend=y,address=$PORT"
	echo "Please start the remote debugging client to continue..."
	elif [ "$CMD" = "start" ]; then
	if [ -e "$CARBON_HOME/wso2carbon.pid" ]; then
	if ps -p $PID >&- ; then
	echo "Process is already running"
	exit 0
	fi
	fi
	export CARBON_HOME=$CARBON_HOME
	# using nohup bash to avoid erros in solaris OS.TODO
	nohup bash $CARBON_HOME/bin/wso2server.sh $args > /dev/null 2>&1 &
	exit 0
	elif [ "$CMD" = "stop" ]; then
	export CARBON_HOME=$CARBON_HOME
	kill -term `cat $CARBON_HOME/wso2carbon.pid`
	exit 0
	elif [ "$CMD" = "restart" ]; then
	export CARBON_HOME=$CARBON_HOME
	kill -term `cat $CARBON_HOME/wso2carbon.pid`
	process_status=0
	pid=`cat $CARBON_HOME/wso2carbon.pid`
	while [ "$process_status" -eq "0" ]
	do
	sleep 1;
	ps -p$pid 2>&1 > /dev/null
	process_status=$?
	done

	# using nohup bash to avoid erros in solaris OS.TODO
	nohup bash $CARBON_HOME/bin/wso2server.sh $args > /dev/null 2>&1 &
	exit 0
	elif [ "$CMD" = "test" ]; then
	JAVACMD="exec "$JAVACMD""
	elif [ "$CMD" = "version" ]; then
	cat $CARBON_HOME/bin/version.txt
	cat $CARBON_HOME/bin/wso2carbon-version.txt
	exit 0
	fi

	# ---------- Handle the SSL Issue with proper JDK version --------------------
	jdk_16=`$JAVA_HOME/bin/java -version 2>&1 \| grep "1.[6\|7]"`
	if [ "$jdk_16" = "" ]; then
	echo " Starting WSO2 Carbon (in unsupported JDK)"
	echo " [ERROR] CARBON is supported only on JDK 1.6 and 1.7"
	fi

	CARBON_XBOOTCLASSPATH=""
	for f in "$CARBON_HOME"/lib/xboot/*.jar
	do
	if [ "$f" != "$CARBON_HOME/lib/xboot/*.jar" ];then
	CARBON_XBOOTCLASSPATH="$CARBON_XBOOTCLASSPATH":$f
	fi
	done

	JAVA_ENDORSED_DIRS="$CARBON_HOME/lib/endorsed":"$JAVA_HOME/jre/lib/endorsed":"$JAVA_HOME/lib/endorsed"

	CARBON_CLASSPATH=""
	if [ -e "$JAVA_HOME/lib/tools.jar" ]; then
	CARBON_CLASSPATH="$JAVA_HOME/lib/tools.jar"
	fi
	for f in "$CARBON_HOME"/bin/*.jar
	do
	if [ "$f" != "$CARBON_HOME/bin/*.jar" ];then
	CARBON_CLASSPATH="$CARBON_CLASSPATH":$f
	fi
	done
	for t in "$CARBON_HOME"/lib/commons-lang*.jar
	do
	CARBON_CLASSPATH="$CARBON_CLASSPATH":$t
	done
	# For Cygwin, switch paths to Windows format before running java
	if $cygwin; then
	JAVA_HOME=`cygpath --absolute --windows "$JAVA_HOME"`
	CARBON_HOME=`cygpath --absolute --windows "$CARBON_HOME"`
	AXIS2_HOME=`cygpath --absolute --windows "$CARBON_HOME"`
	CLASSPATH=`cygpath --path --windows "$CLASSPATH"`
	JAVA_ENDORSED_DIRS=`cygpath --path --windows "$JAVA_ENDORSED_DIRS"`
	CARBON_CLASSPATH=`cygpath --path --windows "$CARBON_CLASSPATH"`
	CARBON_XBOOTCLASSPATH=`cygpath --path --windows "$CARBON_XBOOTCLASSPATH"`
	fi

	# ----- Execute The Requested Command -----------------------------------------

	echo JAVA_HOME environment variable is set to $JAVA_HOME
	echo CARBON_HOME environment variable is set to $CARBON_HOME

	cd "$CARBON_HOME"

	START_EXIT_STATUS=121
	status=$START_EXIT_STATUS

	#To monitor a Carbon server in remote JMX mode on linux host machines, set the below system property.
	# -Djava.rmi.server.hostname="your.IP.goes.here"

	while [ "$status" = "$START_EXIT_STATUS" ]
	do
	$JAVACMD \
	-Xbootclasspath/a:"$CARBON_XBOOTCLASSPATH" \
	-Xms256m -Xmx1024m -XX:MaxPermSize=256m \
	-XX:+HeapDumpOnOutOfMemoryError \
	-XX:HeapDumpPath="$CARBON_HOME/repository/logs/heap-dump.hprof" \
	$JAVA_OPTS \
	-Dcom.sun.management.jmxremote \
	-classpath "$CARBON_CLASSPATH" \
	-Djava.endorsed.dirs="$JAVA_ENDORSED_DIRS" \
	-Djava.io.tmpdir="$CARBON_HOME/tmp" \
	-Dcatalina.base="$CARBON_HOME/lib/tomcat" \
	-Dwso2.server.standalone=true \
	-Dcarbon.registry.root=/ \
	-Djava.command="$JAVACMD" \
	-Dcarbon.home="$CARBON_HOME" \
	-Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager \
	-Dcarbon.config.dir.path="$CARBON_HOME/repository/conf" \
	-Djava.util.logging.config.file="$CARBON_HOME/repository/conf/etc/logging-bridge.properties" \
	-Dcomponents.repo="$CARBON_HOME/repository/components/plugins" \
	-Dconf.location="$CARBON_HOME/repository/conf"\
	-Dcom.atomikos.icatch.file="$CARBON_HOME/lib/transactions.properties" \
	-Dcom.atomikos.icatch.hide_init_file_path=true \
	-Dorg.apache.jasper.runtime.BodyContentImpl.LIMIT_BUFFER=true \
	-Dcom.sun.jndi.ldap.connect.pool.authentication=simple \
	-Dcom.sun.jndi.ldap.connect.pool.timeout=3000 \
	-Dorg.terracotta.quartz.skipUpdateCheck=true \
	-Djava.security.egd=file:/dev/./urandom \
	-Dfile.encoding=UTF8 \
	-DWSO2_CARBON_DB_JDBC_URL=$WSO2_CARBON_DB_JDBC_URL \
	-DWSO2_CARBON_DB_USER=$WSO2_CARBON_DB_USER \
	-DWSO2_CARBON_DB_PASSWORD=$WSO2_CARBON_DB_PASSWORD \
	org.wso2.carbon.bootstrap.Bootstrap $*
	status=$?
	done