Context Config Sample

This is a sample of a configuration file holding two context-config data sections. Each bci:realm holds the configuration for a different context. Within that section, the remaining elements are specific to the context provider (note that there is nothing that identifies the configuration data back to the CP at this point, as this association was being done in the cid's URI itself.

1. The id attribute is what is used to resolve from data in the cid to the specific bci:realm
2. The connectorType attribute is actually specific to the JNDI provider, and names the specific JNDI SP being used.
3. The bci:connection element holds data about the backing data store that this context is presenting
4. The bci:env elements were use to hold general config settings.

<bci:realms 
xmlns:bci="http://www.bandit-project.org/commonidentity" 
xmlns:xacml="urn:oasis:names:tc:xacml:2.0:policy:schema:os" 
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
	<bci:realm 
	desc="LDAP Generic name and pw" 
	connectorType="org.bandit.ia.connectors.LDAPConnectorInitialCtxFactory" 
	id="LDAP-Name-PW">
		<bci:connection xsi:type="bci:LDAPConnector">
			<bci:address>ldap://localhost:50389</bci:address>
			<bci:dsnameprefix>uid=</bci:dsnameprefix>
			<bci:dsnamepostfix>,o=higgins</bci:dsnamepostfix>
		</bci:connection>
		<bci:env prop="java.naming.security.authentication" value="simple" />
	</bci:realm>
	<bci:realm 
	desc="LDAP for self-issued authn" 
	connectorType="org.bandit.ia.connectors.LDAPConnectorInitialCtxFactory" 
	id="LDAP-SelfIssued-AuthN">
		<bci:connection xsi:type="bci:LDAPConnector">
			<bci:address>ldap://localhost:389</bci:address>
			<bci:dsnameprefix>cn=</bci:dsnameprefix>
			<bci:dsnamepostfix>,ou=people,dc=wag,dc=bandit-project,dc=org</bci:dsnamepostfix>
		</bci:connection>
		<bci:env prop="java.naming.security.authentication" value="simple" />
		<bci:env prop="java.naming.security.principal" value="cn=admin,o=novell"/>
		<bci:env prop="java.naming.security.credentials" value="novelled8"/>
		<bci:env prop="java.naming.ldap.attributes.binary" value="GUID" />
	</bci:realm>
</bci:realms>