profiles_config.dtd

OPIAM stands for Open Identity and Access Management. This Suite will provide modules for user & rig

<?xml version="1.0" encoding="ISO-8859-1"?>

<!-- DTD of profiles_config.xml file. This file defines resources and profiles. -->

<!-- Top level element : set of resources and profiles. -->
<!ELEMENT profiles 
   ((resource | ressource | profile_staticgroup | profile_filter | profile_default | profile_user | profile_dynamicgroup)+,staticgroup?,dynamicgroup?)>

<!-- 
  Definition of a resource.
   name : name of the resource
   type : name of the corresponding JavaBean class
   param : resource specifiers (among ldap-scope, ldap-base, ldap-filter, object-filter, login-attribute)
-->
<!ELEMENT resource (param*)>
<!ATTLIST resource
	name CDATA #REQUIRED
	type CDATA #REQUIRED
>
<!-- For compatibility -->
<!ELEMENT ressource (param*)>
<!ATTLIST ressource
	name CDATA #REQUIRED
	type CDATA #REQUIRED
>

<!--
  Definition of a resource specifier.
   param-name is the type of specifier : ldap-scope, ldap-base, ldap-filter, object-filter or login-attribute
   param-value is the associated value
  -->
<!ELEMENT param (param-name, param-value)>
<!ELEMENT param-name (#PCDATA)>
<!ELEMENT param-value (#PCDATA)>

<!-- 
  Default profile. 
  Profile of a user in case he does not belong to any other profile.
   name : name of the profile
-->
<!ELEMENT profile_default (ressources|resources)?>
<!ATTLIST profile_default
	name CDATA #REQUIRED
>
<!-- 
  Profile defined by a dynamic group
  If you define such a profile, define also the dynamicgroup element.
   name : name of the profile
   dn : dname of the group
-->
<!ELEMENT profile_dynamicgroup (ressources|resources)?>
<!ATTLIST profile_dynamicgroup
	name CDATA #REQUIRED
	dn CDATA #REQUIRED
>
<!-- 
  Profile defined by an LDAP filter.
   name : name of the profile
   base : search base
   filter : LDAP filter. Beware that & must be written as &amp; in this attribute.
-->
<!ELEMENT profile_filter (ressources|resources)?>
<!ATTLIST profile_filter
	name CDATA #REQUIRED
	base CDATA #IMPLIED
	filter CDATA #REQUIRED
>
<!-- 
  Profile defined by one or several static groups
  If you define such a profile, define also the staticgroup element.
   name : name of the profile
   filter : LDAP filter to get groups, which may correspond to several groups.
            Beware that & must be written as &amp; in this attribute.
   dn : dname of the group, one group only
   filter and dn are mutually exclusive.
-->
<!ELEMENT profile_staticgroup (ressources|resources)?>
<!ATTLIST profile_staticgroup
	name CDATA #REQUIRED
	filter CDATA #IMPLIED
	dn CDATA #IMPLIED
>
<!-- 
  Profile defined as containing a single user.
   name : name of the profile
   dn : dname of the user
-->
<!ELEMENT profile_user (ressources|resources)?>
<!ATTLIST profile_user
	name CDATA #REQUIRED
	dn CDATA #REQUIRED
>

<!-- Resources specific to a profile. -->
<!ELEMENT resources (resource)+>
<!ELEMENT ressources (ressource)+>

<!-- 
  Definition of static group properties used for profiles membership search.
   resource : name of the resource considered as static group (default : "staticgroup")
   field : name of the field used to get group members (default : "uniqueMember")
-->
<!ELEMENT staticgroup EMPTY>
<!ATTLIST staticgroup
       resource CDATA #REQUIRED
       field CDATA #IMPLIED
>

<!-- 
  Definition of dynamic group properties used for profiles membership search.
   resource : name of the resource considered as dynamic group
   field : name of the field used to get group members
   There are no default values.
-->
<!ELEMENT dynamicgroup EMPTY>
<!ATTLIST dynamicgroup
       resource CDATA #REQUIRED
       field CDATA #IMPLIED
>