<commit_before><?xml version="1.0" encoding="UTF-8"?>
<!--

    Copyright 2004-2005 The Apache Software Foundation

    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.
    You may obtain a copy of the License at

       http://www.apache.org/licenses/LICENSE-2.0

    Unless required by applicable law or agreed to in writing, software
    distributed under the License is distributed on an "AS IS" BASIS,
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.
-->

<!-- $Rev: 46040 $ $Date: 2004-09-14 14:28:44 -0700 (Tue, 14 Sep 2004) $ -->

<!--
Configuration for corba on a Geronimo serverl, including client and target security examples.

-->
<configuration
    xmlns="http://geronimo.apache.org/xml/ns/deployment-1.0"
    configId="org/apache/geronimo/ServerCORBA"
    parentId="org/apache/geronimo/Server"
    >

    <!-- CORBA -->
    <gbean name="DynamicORBStubClassLoader" class="org.openejb.corba.util.DynamicStubClassLoader"/>

    <gbean name="NameServer" class="org.openejb.corba.SunNameService">
        <reference name="ServerInfo">
            <module>org/apache/geronimo/System</module>
            <name>ServerInfo</name>
        </reference>
        <attribute name="dbDir">var/cosnaming.db</attribute>
        <attribute name="port">${PlanCOSNamingPort}</attribute>
    </gbean>

    <!-- connections require SSL, no client cert, client logs in with password, no identity token -->
    <gbean name="Server" class="org.openejb.corba.CORBABean">
        <reference name="ThreadPool">
            <module>org/apache/geronimo/Server</module>
            <name>DefaultThreadPool</name>
        </reference>
        <reference name="NameService">
            <name>NameServer</name>
        </reference>
        <reference name="SecurityService">
            <module>*</module>
            <name>SecurityService</name>
        </reference>
        <attribute name="args">-ORBInitRef, NameService=corbaloc::${PlanCOSNamingHost}:${PlanCOSNamingPort}/NameService</attribute>
        <attribute name="configAdapter">org.openejb.corba.sunorb.SunORBConfigAdapter</attribute>
        <xml-attribute name="tssConfig">
            <tss:tss xmlns:tss="http://www.openejb.org/xml/ns/corba-tss-config-2.0" xmlns:sec="http://geronimo.apache.org/xml/ns/security-1.1">
                <tss:default-principal>
                    <sec:principal class="org.apache.geronimo.security.realm.providers.GeronimoUserPrincipal" name="guest"/>
                </tss:default-principal>
                <tss:SSL port="${PlanORBSSLPort}" hostname="${PlanORBSSLHost}">
                    <tss:supports>Integrity Confidentiality EstablishTrustInTarget</tss:supports>
                    <tss:requires>Integrity Confidentiality</tss:requires>
                </tss:SSL>
                <tss:compoundSecMechTypeList>
                    <tss:compoundSecMech>
                        <tss:GSSUP required="true" targetName="default"/>
                        <tss:sasMech>
                            <tss:identityTokenTypes>
                                <tss:ITTAbsent/>
                            </tss:identityTokenTypes>
                        </tss:sasMech>
                    </tss:compoundSecMech>
                </tss:compoundSecMechTypeList>
            </tss:tss>
        </xml-attribute>
    </gbean>

    <gbean name="SSLClientCert" class="org.openejb.corba.TSSBean">
        <attribute name="POAName">SSLClientCert</attribute>
        <reference name="Server">
            <name>Server</name>
        </reference>
        <xml-attribute name="tssConfig">
            <tss:tss xmlns:tss="http://www.openejb.org/xml/ns/corba-tss-config-2.0" xmlns:sec="http://geronimo.apache.org/xml/ns/security-1.1">
                <tss:default-principal>
                    <sec:principal class="org.apache.geronimo.security.realm.providers.GeronimoUserPrincipal" name="guest"/>
                </tss:default-principal>
                <tss:SSL port="${PlanORBSSLPort}" hostname="${PlanORBSSLHost}">
                    <tss:supports>Integrity Confidentiality EstablishTrustInTarget EstablishTrustInClient</tss:supports>
                    <tss:requires>Integrity Confidentiality EstablishTrustInClient</tss:requires>
                </tss:SSL>
                <tss:compoundSecMechTypeList>
                    <tss:compoundSecMech>
                        <tss:sasMech>
                            <tss:identityTokenTypes>
                                <tss:ITTAbsent/>
                            </tss:identityTokenTypes>
                        </tss:sasMech>
                    </tss:compoundSecMech>
                </tss:compoundSecMechTypeList>
            </tss:tss>
        </xml-attribute>
    </gbean>

    <gbean name="SSLClientPassword" class="org.openejb.corba.TSSBean">
        <attribute name="POAName">SSLClientPassword</attribute>
        <reference name="Server">
            <name>Server</name>
        </reference>
        <xml-attribute name="tssConfig">
            <tss:tss xmlns:tss="http://www.openejb.org/xml/ns/corba-tss-config-2.0" xmlns:sec="http://geronimo.apache.org/xml/ns/security-1.1">
                <tss:default-principal>
                    <sec:principal class="org.apache.geronimo.security.realm.providers.GeronimoUserPrincipal" name="guest"/>
                </tss:default-principal>
                <tss:SSL port="${PlanORBSSLPort}" hostname="${PlanORBSSLHost}">
                    <tss:supports>Integrity Confidentiality EstablishTrustInTarget</tss:supports>
                    <tss:requires>Integrity Confidentiality</tss:requires>
                </tss:SSL>
                <tss:compoundSecMechTypeList>
                    <tss:compoundSecMech>
                        <tss:GSSUP required="true" targetName="default"/>
                        <tss:sasMech>
                            <tss:identityTokenTypes>
                                <tss:ITTAbsent/>
                            </tss:identityTokenTypes>
                        </tss:sasMech>
                    </tss:compoundSecMech>
                </tss:compoundSecMechTypeList>
            </tss:tss>
        </xml-attribute>
    </gbean>

    <gbean name="SSLIdentityToken" class="org.openejb.corba.TSSBean">
        <attribute name="POAName">SSLIdentityToken</attribute>
        <reference name="Server">
            <name>Server</name>
        </reference>
        <xml-attribute name="tssConfig">
            <tss:tss xmlns:tss="http://www.openejb.org/xml/ns/corba-tss-config-2.0" xmlns:sec="http://geronimo.apache.org/xml/ns/security-1.1">
                <tss:default-principal>
                    <sec:principal class="org.apache.geronimo.security.realm.providers.GeronimoUserPrincipal" name="guest"/>
                </tss:default-principal>
                <tss:SSL port="${PlanORBSSLPort}" hostname="${PlanORBSSLHost}">
                    <tss:supports>Integrity Confidentiality EstablishTrustInTarget</tss:supports>
                    <tss:requires>Integrity Confidentiality</tss:requires>
                </tss:SSL>
                <tss:compoundSecMechTypeList>
                    <tss:compoundSecMech>
                        <tss:sasMech>
                            <tss:identityTokenTypes>
                                <tss:ITTAnonymous/>
                                <tss:ITTPrincipalNameGSSUP realm-name="cts-properties-realm"/>
                                <tss:ITTDistinguishedName realm-name="cts-properties-realm"/>
                                <tss:ITTX509CertChain realm-name="cts-properties-realm"/>
                            </tss:identityTokenTypes>
                        </tss:sasMech>
                    </tss:compoundSecMech>
                </tss:compoundSecMechTypeList>
            </tss:tss>
        </xml-attribute>
    </gbean>

    <!-- orb with no security whatsoever -->
    <gbean name="UnprotectedServer" class="org.openejb.corba.CORBABean">
        <reference name="ThreadPool">
            <module>org/apache/geronimo/Server</module>
            <name>DefaultThreadPool</name>
        </reference>
        <reference name="NameService">
            <name>NameServer</name>
        </reference>
        <reference name="SecurityService">
            <module>*</module>
            <name>SecurityService</name>
        </reference>
        <attribute name="args">-ORBInitRef, NameService=corbaloc::${PlanCOSNamingHost}:${PlanCOSNamingPort}/NameService</attribute>
        <attribute name="configAdapter">org.openejb.corba.sunorb.SunORBConfigAdapter</attribute>
        <xml-attribute name="tssConfig">
            <tss:tss xmlns:tss="http://www.openejb.org/xml/ns/corba-tss-config-2.0" xmlns:sec="http://geronimo.apache.org/xml/ns/security-1.1">
                <tss:default-principal>
                    <sec:principal class="org.apache.geronimo.security.realm.providers.GeronimoUserPrincipal" name="guest"/>
                </tss:default-principal>
                <tss:compoundSecMechTypeList>
                    <tss:compoundSecMech>
                        <tss:GSSUP required="true" targetName="default"/>
                        <tss:sasMech>
                            <tss:identityTokenTypes>
                                <tss:ITTAbsent/>
                            </tss:identityTokenTypes>
                        </tss:sasMech>
                    </tss:compoundSecMech>
                </tss:compoundSecMechTypeList>
            </tss:tss>
        </xml-attribute>
    </gbean>

    <gbean name="IdentityTokenNoSecurity" class="org.openejb.corba.TSSBean">
        <attribute name="POAName">IdentityTokenNoSecurity</attribute>
        <reference name="Server">
            <name>UnprotectedServer</name>
        </reference>
        <xml-attribute name="tssConfig">
            <tss:tss xmlns:tss="http://www.openejb.org/xml/ns/corba-tss-config-2.0" xmlns:sec="http://geronimo.apache.org/xml/ns/security-1.1">
                <tss:default-principal>
                    <sec:principal class="org.apache.geronimo.security.realm.providers.GeronimoUserPrincipal" name="guest"/>
                </tss:default-principal>
                <tss:compoundSecMechTypeList>
                    <tss:compoundSecMech>
                        <tss:sasMech>
                            <tss:identityTokenTypes>
                                <tss:ITTAnonymous/>
                                <tss:ITTPrincipalNameGSSUP realm-name="cts-properties-realm"/>
                                <tss:ITTDistinguishedName realm-name="cts-properties-realm"/>
                                <tss:ITTX509CertChain realm-name="cts-properties-realm"/>
                            </tss:identityTokenTypes>
                        </tss:sasMech>
                    </tss:compoundSecMech>
                </tss:compoundSecMechTypeList>
            </tss:tss>
        </xml-attribute>
    </gbean>

    <gbean name="SSLClientCertIdentityToken" class="org.openejb.corba.TSSBean">
        <attribute name="POAName">SSLClientCertIdentityToken</attribute><commit_msg>workaround for GERONIMO-1145 add dependency to force unsecured orb to start second<commit_after><?xml version="1.0" encoding="UTF-8"?>
<!--

    Copyright 2004-2005 The Apache Software Foundation

    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.
    You may obtain a copy of the License at

       http://www.apache.org/licenses/LICENSE-2.0

    Unless required by applicable law or agreed to in writing, software
    distributed under the License is distributed on an "AS IS" BASIS,
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.
-->

<!-- $Rev: 46040 $ $Date: 2004-09-14 14:28:44 -0700 (Tue, 14 Sep 2004) $ -->

<!--
Configuration for corba on a Geronimo serverl, including client and target security examples.

-->
<configuration
    xmlns="http://geronimo.apache.org/xml/ns/deployment-1.0"
    configId="org/apache/geronimo/ServerCORBA"
    parentId="org/apache/geronimo/Server"
    >

    <!-- CORBA -->
    <gbean name="DynamicORBStubClassLoader" class="org.openejb.corba.util.DynamicStubClassLoader"/>

    <gbean name="NameServer" class="org.openejb.corba.SunNameService">
        <reference name="ServerInfo">
            <module>org/apache/geronimo/System</module>
            <name>ServerInfo</name>
        </reference>
        <attribute name="dbDir">var/cosnaming.db</attribute>
        <attribute name="port">${PlanCOSNamingPort}</attribute>
    </gbean>

    <!-- connections require SSL, no client cert, client logs in with password, no identity token -->
    <gbean name="Server" class="org.openejb.corba.CORBABean">
        <reference name="ThreadPool">
            <module>org/apache/geronimo/Server</module>
            <name>DefaultThreadPool</name>
        </reference>
        <reference name="NameService">
            <name>NameServer</name>
        </reference>
        <reference name="SecurityService">
            <module>*</module>
            <name>SecurityService</name>
        </reference>
        <attribute name="args">-ORBInitRef, NameService=corbaloc::${PlanCOSNamingHost}:${PlanCOSNamingPort}/NameService</attribute>
        <attribute name="configAdapter">org.openejb.corba.sunorb.SunORBConfigAdapter</attribute>
        <xml-attribute name="tssConfig">
            <tss:tss xmlns:tss="http://www.openejb.org/xml/ns/corba-tss-config-2.0" xmlns:sec="http://geronimo.apache.org/xml/ns/security-1.1">
                <tss:default-principal>
                    <sec:principal class="org.apache.geronimo.security.realm.providers.GeronimoUserPrincipal" name="guest"/>
                </tss:default-principal>
                <tss:SSL port="${PlanORBSSLPort}" hostname="${PlanORBSSLHost}">
                    <tss:supports>Integrity Confidentiality EstablishTrustInTarget</tss:supports>
                    <tss:requires>Integrity Confidentiality</tss:requires>
                </tss:SSL>
                <tss:compoundSecMechTypeList>
                    <tss:compoundSecMech>
                        <tss:GSSUP required="true" targetName="default"/>
                        <tss:sasMech>
                            <tss:identityTokenTypes>
                                <tss:ITTAbsent/>
                            </tss:identityTokenTypes>
                        </tss:sasMech>
                    </tss:compoundSecMech>
                </tss:compoundSecMechTypeList>
            </tss:tss>
        </xml-attribute>
    </gbean>

    <gbean name="SSLClientCert" class="org.openejb.corba.TSSBean">
        <attribute name="POAName">SSLClientCert</attribute>
        <reference name="Server">
            <name>Server</name>
        </reference>
        <xml-attribute name="tssConfig">
            <tss:tss xmlns:tss="http://www.openejb.org/xml/ns/corba-tss-config-2.0" xmlns:sec="http://geronimo.apache.org/xml/ns/security-1.1">
                <tss:default-principal>
                    <sec:principal class="org.apache.geronimo.security.realm.providers.GeronimoUserPrincipal" name="guest"/>
                </tss:default-principal>
                <tss:SSL port="${PlanORBSSLPort}" hostname="${PlanORBSSLHost}">
                    <tss:supports>Integrity Confidentiality EstablishTrustInTarget EstablishTrustInClient</tss:supports>
                    <tss:requires>Integrity Confidentiality EstablishTrustInClient</tss:requires>
                </tss:SSL>
                <tss:compoundSecMechTypeList>
                    <tss:compoundSecMech>
                        <tss:sasMech>
                            <tss:identityTokenTypes>
                                <tss:ITTAbsent/>
                            </tss:identityTokenTypes>
                        </tss:sasMech>
                    </tss:compoundSecMech>
                </tss:compoundSecMechTypeList>
            </tss:tss>
        </xml-attribute>
    </gbean>

    <gbean name="SSLClientPassword" class="org.openejb.corba.TSSBean">
        <attribute name="POAName">SSLClientPassword</attribute>
        <reference name="Server">
            <name>Server</name>
        </reference>
        <xml-attribute name="tssConfig">
            <tss:tss xmlns:tss="http://www.openejb.org/xml/ns/corba-tss-config-2.0" xmlns:sec="http://geronimo.apache.org/xml/ns/security-1.1">
                <tss:default-principal>
                    <sec:principal class="org.apache.geronimo.security.realm.providers.GeronimoUserPrincipal" name="guest"/>
                </tss:default-principal>
                <tss:SSL port="${PlanORBSSLPort}" hostname="${PlanORBSSLHost}">
                    <tss:supports>Integrity Confidentiality EstablishTrustInTarget</tss:supports>
                    <tss:requires>Integrity Confidentiality</tss:requires>
                </tss:SSL>
                <tss:compoundSecMechTypeList>
                    <tss:compoundSecMech>
                        <tss:GSSUP required="true" targetName="default"/>
                        <tss:sasMech>
                            <tss:identityTokenTypes>
                                <tss:ITTAbsent/>
                            </tss:identityTokenTypes>
                        </tss:sasMech>
                    </tss:compoundSecMech>
                </tss:compoundSecMechTypeList>
            </tss:tss>
        </xml-attribute>
    </gbean>

    <gbean name="SSLIdentityToken" class="org.openejb.corba.TSSBean">
        <attribute name="POAName">SSLIdentityToken</attribute>
        <reference name="Server">
            <name>Server</name>
        </reference>
        <xml-attribute name="tssConfig">
            <tss:tss xmlns:tss="http://www.openejb.org/xml/ns/corba-tss-config-2.0" xmlns:sec="http://geronimo.apache.org/xml/ns/security-1.1">
                <tss:default-principal>
                    <sec:principal class="org.apache.geronimo.security.realm.providers.GeronimoUserPrincipal" name="guest"/>
                </tss:default-principal>
                <tss:SSL port="${PlanORBSSLPort}" hostname="${PlanORBSSLHost}">
                    <tss:supports>Integrity Confidentiality EstablishTrustInTarget</tss:supports>
                    <tss:requires>Integrity Confidentiality</tss:requires>
                </tss:SSL>
                <tss:compoundSecMechTypeList>
                    <tss:compoundSecMech>
                        <tss:sasMech>
                            <tss:identityTokenTypes>
                                <tss:ITTAnonymous/>
                                <tss:ITTPrincipalNameGSSUP realm-name="cts-properties-realm"/>
                                <tss:ITTDistinguishedName realm-name="cts-properties-realm"/>
                                <tss:ITTX509CertChain realm-name="cts-properties-realm"/>
                            </tss:identityTokenTypes>
                        </tss:sasMech>
                    </tss:compoundSecMech>
                </tss:compoundSecMechTypeList>
            </tss:tss>
        </xml-attribute>
    </gbean>

    <!-- orb with no security whatsoever -->
    <gbean name="UnprotectedServer" class="org.openejb.corba.CORBABean">
        <reference name="ThreadPool">
            <module>org/apache/geronimo/Server</module>
            <name>DefaultThreadPool</name>
        </reference>
        <reference name="NameService">
            <name>NameServer</name>
        </reference>
        <reference name="SecurityService">
            <module>*</module>
            <name>SecurityService</name>
        </reference>
        <attribute name="args">-ORBInitRef, NameService=corbaloc::${PlanCOSNamingHost}:${PlanCOSNamingPort}/NameService</attribute>
        <attribute name="configAdapter">org.openejb.corba.sunorb.SunORBConfigAdapter</attribute>
        <xml-attribute name="tssConfig">
            <tss:tss xmlns:tss="http://www.openejb.org/xml/ns/corba-tss-config-2.0" xmlns:sec="http://geronimo.apache.org/xml/ns/security-1.1">
                <tss:default-principal>
                    <sec:principal class="org.apache.geronimo.security.realm.providers.GeronimoUserPrincipal" name="guest"/>
                </tss:default-principal>
                <tss:compoundSecMechTypeList>
                    <tss:compoundSecMech>
                        <tss:GSSUP required="true" targetName="default"/>
                        <tss:sasMech>
                            <tss:identityTokenTypes>
                                <tss:ITTAbsent/>
                            </tss:identityTokenTypes>
                        </tss:sasMech>
                    </tss:compoundSecMech>
                </tss:compoundSecMechTypeList>
            </tss:tss>
        </xml-attribute>
        <dependency>
            <type>CORBABean</type>
            <name>Server</name>
        </dependency>
    </gbean>

    <gbean name="IdentityTokenNoSecurity" class="org.openejb.corba.TSSBean">
        <attribute name="POAName">IdentityTokenNoSecurity</attribute>
        <reference name="Server">
            <name>UnprotectedServer</name>
        </reference>
        <xml-attribute name="tssConfig">
            <tss:tss xmlns:tss="http://www.openejb.org/xml/ns/corba-tss-config-2.0" xmlns:sec="http://geronimo.apache.org/xml/ns/security-1.1">
                <tss:default-principal>
                    <sec:principal class="org.apache.geronimo.security.realm.providers.GeronimoUserPrincipal" name="guest"/>
                </tss:default-principal>
                <tss:compoundSecMechTypeList>
                    <tss:compoundSecMech>
                        <tss:sasMech>
                            <tss:identityTokenTypes>
                                <tss:ITTAnonymous/>
                                <tss:ITTPrincipalNameGSSUP realm-name="cts-properties-realm"/>
                                <tss:ITTDistinguishedName realm-name="cts-properties-realm"/>
                                <tss:ITTX509CertChain realm-name="cts-properties-realm"/>
                            </tss:identityTokenTypes>
                        </tss:sasMech>
                    </tss:compoundSecMech>
                </tss:compoundSecMechTypeList>
            </tss:tss>
        </xml-attribute>
    </gbean>

    <gbean name="SSLClientCertIdentityToken" class="org.openejb.corba.TSSBean">
        <attribute name="POAName">SSLClientCertIdentityToken</attribute>
{'fraction_non_alphanumeric': 0.12449781466601915, 'fraction_numerical': 0.00688711315173723, 'mean_word_length': 1.9364791288566243, 'pattern_counts': {'":': 0, '<': 467, '<?xml version=': 2, '>': 467, 'https://': 0, 'lorem ipsum': 0, 'www.': 14, 'xml': 78}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '250386', 'n_tokens_mistral': 6958, 'n_tokens_neox': 6569, 'n_words': 866}