schemas/shibboleth-targetconfig-1.0.xsd

   1 <?xml version="1.0" encoding="US-ASCII"?>
   2 <schema targetNamespace="urn:mace:shibboleth:target:config:1.0"
   3         xmlns="http://www.w3.org/2001/XMLSchema"
   4         xmlns:conf="urn:mace:shibboleth:target:config:1.0"
   5         xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion"
   6         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
   7         xsi:schemaLocation="urn:mace:shibboleth:target:config:1.0 shibboleth-targetconfig-1.0.xsd"
   8         elementFormDefault="qualified"
   9         attributeFormDefault="unqualified"
  10         blockDefault="substitution"
  11         version="1.0">
  12
  13         <import namespace="http://www.w3.org/2000/09/xmldsig#" schemaLocation="xmldsig-core-schema.xsd"/>
  14         <import namespace="urn:oasis:names:tc:SAML:1.0:assertion" schemaLocation="cs-sstc-schema-assertion-1.1.xsd"/>
  15
  16         <annotation>
  17                 <documentation>
  18         1.0 schema for XML-based configuration of Shibboleth target libraries and modules.
  19         First appearing in Shibboleth 1.2 release.
  20         </documentation>
  21     </annotation>
  22
  23         <complexType name="PluggableType">
  24                 <complexContent>
  25                         <extension base="anyType">
  26                                 <attribute name="type" type="string" use="required"/>
  27                         </extension>
  28                 </complexContent>
  29         </complexType>
  30
  31         <element name="ShibbolethTargetConfig">
  32                 <annotation>
  33                         <documentation>Outer element of configuration file</documentation>
  34                 </annotation>
  35                 <complexType>
  36                         <sequence>
  37                                 <element ref="conf:Extensions" minOccurs="0"/>
  38                                 <element ref="conf:SHAR" minOccurs="0"/>
  39                                 <element ref="conf:SHIRE" minOccurs="0"/>
  40                                 <element ref="conf:Applications"/>
  41                                 <element name="CredentialsProvider" type="conf:PluggableType" maxOccurs="unbounded"/>
  42                         </sequence>
  43                         <attribute name="logger" type="anyURI" use="optional"/>
  44                         <anyAttribute namespace="##any" processContents="lax"/>
  45                 </complexType>
  46         </element>
  47
  48         <element name="Extensions">
  49                 <annotation>
  50                         <documentation>Container for extension libraries and custom configuration</documentation>
  51                 </annotation>
  52                 <complexType>
  53                         <sequence>
  54                                 <element name="Library" minOccurs="0" maxOccurs="unbounded">
  55                                         <complexType>
  56                                     <complexContent>
  57                                         <extension base="anyType">
  58                                                 <attribute name="path" type="anyURI" use="required"/>
  59                                                                 <attribute name="fatal" type="boolean" use="optional"/>
  60                                         </extension>
  61                                     </complexContent>
  62                                         </complexType>
  63                                 </element>
  64                                 <any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
  65                         </sequence>
  66                 </complexType>
  67         </element>
  68
  69         <element name="SHAR">
  70                 <annotation>
  71                         <documentation>Container for SHAR configuration</documentation>
  72                 </annotation>
  73                 <complexType>
  74                         <sequence>
  75                                 <element ref="conf:Extensions" minOccurs="0"/>
  76                                 <choice>
  77                                         <element name="UnixListener">
  78                                                 <complexType>
  79                                                         <complexContent>
  80                                                                 <extension base="anyType">
  81                                                                         <attribute name="address" type="string" use="required"/>
  82                                                                 </extension>
  83                                                         </complexContent>
  84                                                 </complexType>
  85                                         </element>
  86                                         <element name="TCPListener">
  87                                                 <complexType>
  88                                                         <complexContent>
  89                                                                 <extension base="anyType">
  90                                                                         <attribute name="address" type="string" use="required"/>
  91                                                                         <attribute name="port" type="unsignedInt" use="required"/>
  92                                                                         <attribute name="acl" use="optional" default="127.0.0.1">
  93                                                                                 <simpleType>
  94                                                                                         <list itemType="string"/>
  95                                                                                 </simpleType>
  96                                                                         </attribute>
  97                                                                 </extension>
  98                                                         </complexContent>
  99                                                 </complexType>
 100                                         </element>
 101                                         <element name="Listener" type="conf:PluggableType"/>
 102                                 </choice>
 103                                 <choice>
 104                                         <element name="MemorySessionCache">
 105                                                 <complexType>
 106                                                         <complexContent>
 107                                                                 <extension base="anyType">
 108                                                                         <attributeGroup ref="conf:SessionCacheProperties"/>
 109                                                                 </extension>
 110                                                         </complexContent>
 111                                                 </complexType>
 112                                         </element>
 113                                         <element name="MySQLSessionCache">
 114                                                 <complexType>
 115                                                         <complexContent>
 116                                                                 <restriction base="anyType" mixed="false">
 117                                                                         <sequence>
 118                                                                                 <element name="Argument" type="string" minOccurs="0" maxOccurs="unbounded"/>
 119                                                                         </sequence>
 120                                                                         <attributeGroup ref="conf:SessionCacheProperties"/>
 121                                                                         <attribute name="mysqlTimeout" type="unsignedInt" use="optional" default="14400"/>
 122                                                                         <anyAttribute namespace="##any" processContents="lax"/>
 123                                                                 </restriction>
 124                                                         </complexContent>
 125                                                 </complexType>
 126                                         </element>
 127                                         <element name="SessionCache">
 128                                                 <complexType>
 129                                             <complexContent>
 130                                                 <extension base="conf:PluggableType">
 131                                                         <attributeGroup ref="conf:SessionCacheProperties"/>
 132                                                 </extension>
 133                                             </complexContent>
 134                                                 </complexType>
 135                                         </element>
 136                                 </choice>
 137                                 <any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
 138                         </sequence>
 139                         <attribute name="logger" type="anyURI" use="optional"/>
 140                         <anyAttribute namespace="##any" processContents="lax"/>
 141                 </complexType>
 142         </element>
 143
 144         <attributeGroup name="SessionCacheProperties">
 145         <attribute name="cleanupInterval" type="unsignedInt" use="optional" default="300"/>
 146         <attribute name="cacheTimeout" type="unsignedInt" use="optional" default="28800"/>
 147                 <attribute name="AAConnectTimeout" type="unsignedInt" use="optional" default="15"/>
 148                 <attribute name="AATimeout" type="unsignedInt" use="optional" default="30"/>
 149                 <attribute name="defaultLifetime" type="unsignedInt" use="optional" default="1800"/>
 150                 <attribute name="retryInterval" type="unsignedInt" use="optional" default="300"/>
 151                 <attribute name="strictValidity" type="boolean" use="optional" default="true"/>
 152                 <attribute name="propagateErrors" type="boolean" use="optional" default="false"/>
 153         </attributeGroup>
 154
 155         <element name="SHIRE">
 156                 <annotation>
 157                         <documentation>
 158                         Container for configuration glue between target library and the surrounding application environment.
 159                         </documentation>
 160                 </annotation>
 161                 <complexType>
 162                         <sequence>
 163                                 <element ref="conf:Extensions" minOccurs="0"/>
 164                                 <choice minOccurs="0">
 165                                         <element ref="conf:RequestMap"/>
 166                                         <element name="RequestMapProvider" type="conf:PluggableType"/>
 167                                 </choice>
 168                                 <element name="Implementation" minOccurs="0">
 169                                         <complexType>
 170                                                 <choice maxOccurs="unbounded">
 171                                                         <element ref="conf:ISAPI"/>
 172                                                         <element ref="conf:NSAPI"/>
 173                                                         <element ref="conf:Java"/>
 174                                                         <any namespace="##other" processContents="lax"/>
 175                                                 </choice>
 176                                         </complexType>
 177                                 </element>
 178                                 <any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
 179                         </sequence>
 180                         <attribute name="logger" type="anyURI" use="optional"/>
 181                         <anyAttribute namespace="##any" processContents="lax"/>
 182                 </complexType>
 183         </element>
 184
 185         <element name="ISAPI">
 186                 <complexType>
 187                         <sequence>
 188                                 <element name="Site" maxOccurs="unbounded">
 189                                         <complexType>
 190                                                 <complexContent>
 191                                                         <extension base="anyType">
 192                                                                 <attribute name="id" type="unsignedInt" use="required"/>
 193                                                                 <attribute name="host" type="string" use="required"/>
 194                                                         </extension>
 195                                                 </complexContent>
 196                                         </complexType>
 197                                 </element>
 198                                 <any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
 199                         </sequence>
 200                         <attribute name="normalizeRequest" type="boolean" use="optional"/>
 201                         <anyAttribute namespace="##any" processContents="lax"/>
 202                 </complexType>
 203         </element>
 204         <element name="NSAPI" type="anyType"/>
 205         <element name="Java" type="anyType"/>
 206
 207         <element name="htaccess" type="conf:UniOperatorType">
 208                 <annotation>
 209                         <documentation>
 210                         A simple example access policy language extension that supersedes Apache .htaccess
 211                         </documentation>
 212                 </annotation>
 213         </element>
 214         <element name="OR" type="conf:MultiOperatorType"/>
 215         <element name="AND" type="conf:MultiOperatorType"/>
 216         <element name="NOT" type="conf:UniOperatorType"/>
 217         <complexType name="UniOperatorType">
 218                 <choice>
 219                         <element ref="conf:AND"/>
 220                         <element ref="conf:OR"/>
 221                         <element ref="conf:NOT"/>
 222                         <element ref="conf:Rule"/>
 223                 </choice>
 224         </complexType>
 225         <complexType name="MultiOperatorType">
 226                 <choice minOccurs="2" maxOccurs="unbounded">
 227                         <element ref="conf:AND"/>
 228                         <element ref="conf:OR"/>
 229                         <element ref="conf:NOT"/>
 230                         <element ref="conf:Rule"/>
 231                 </choice>
 232         </complexType>
 233         <element name="Rule">
 234                 <complexType>
 235                         <simpleContent>
 236                                 <extension base="conf:listOfStrings">
 237                                         <attribute name="require" type="string" use="required"/>
 238                                 </extension>
 239                         </simpleContent>
 240                 </complexType>
 241         </element>
 242         <simpleType name="listOfStrings">
 243                 <list itemType='string'/>
 244         </simpleType>
 245
 246         <attributeGroup name="ContentSettings">
 247                 <attribute name="requireSession" type="boolean" use="optional"/>
 248                 <attribute name="exportAssertion" type="boolean" use="optional"/>
 249                 <anyAttribute namespace="##any" processContents="lax"/>
 250         </attributeGroup>
 251         <element name="AccessControlProvider" type="conf:PluggableType"/>
 252
 253     <element name="RequestMap">
 254                 <annotation>
 255                         <documentation>
 256                         Built-in request mapping syntax, decomposes URLs into Host/Path/Path/...
 257                         </documentation>
 258                 </annotation>
 259         <complexType>
 260             <sequence>
 261                 <choice minOccurs="0">
 262                         <element ref="conf:htaccess"/>
 263                         <element ref="conf:AccessControlProvider"/>
 264                     </choice>
 265                 <element ref="conf:Host" minOccurs="0" maxOccurs="unbounded"/>
 266             </sequence>
 267             <attribute name="applicationId" type="string" fixed="default"/>
 268                 <attributeGroup ref="conf:ContentSettings"/>
 269         </complexType>
 270     </element>
 271
 272     <element name="Host">
 273         <complexType>
 274                 <sequence>
 275                 <choice minOccurs="0">
 276                         <element ref="conf:htaccess"/>
 277                         <element ref="conf:AccessControlProvider"/>
 278                     </choice>
 279                         <element ref="conf:Path" minOccurs="0" maxOccurs="unbounded"/>
 280                 </sequence>
 281                 <attribute name="scheme" use="optional" default="http">
 282                             <simpleType>
 283                                 <restriction base="string">
 284                                     <enumeration value="http"/>
 285                                     <enumeration value="https"/>
 286                                     <enumeration value="ftp"/>
 287                                     <enumeration value="ldap"/>
 288                                     <enumeration value="ldaps"/>
 289                                 </restriction>
 290                             </simpleType>
 291                 </attribute>
 292                 <attribute name="name" type="string" use="required"/>
 293                 <attribute name="port" type="unsignedInt" use="optional"/>
 294                 <attribute name="applicationId" type="string" use="optional"/>
 295                 <attributeGroup ref="conf:ContentSettings"/>
 296         </complexType>
 297     </element>
 298
 299     <element name="Path">
 300         <complexType>
 301                 <sequence>
 302                 <choice minOccurs="0">
 303                         <element ref="conf:htaccess"/>
 304                         <element ref="conf:AccessControlProvider"/>
 305                     </choice>
 306                         <element ref="conf:Path" minOccurs="0" maxOccurs="unbounded"/>
 307                 </sequence>
 308                 <attribute name="name" type="string" use="required"/>
 309                 <attribute name="applicationId" type="string" use="optional"/>
 310                 <attributeGroup ref="conf:ContentSettings"/>
 311         </complexType>
 312     </element>
 313
 314         <element name="Applications">
 315                 <annotation>
 316                         <documentation>
 317                         Container for global target settings and application-specific overrides
 318                         </documentation>
 319                 </annotation>
 320                 <complexType>
 321                         <sequence>
 322                                 <element ref="conf:Sessions"/>
 323                                 <element ref="conf:Errors"/>
 324                                 <element ref="conf:Policy" minOccurs="0"/>
 325                                 <element ref="conf:CredentialUse" minOccurs="0"/>
 326                                 <element ref="conf:Application" minOccurs="0" maxOccurs="unbounded"/>
 327                                 <any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
 328                         </sequence>
 329                         <attribute name="id" type="string" fixed="default"/>
 330                         <attribute name="providerId" type="anyURI" use="required"/>
 331                 <anyAttribute namespace="##any" processContents="lax"/>
 332                 </complexType>
 333         </element>
 334
 335         <element name="Application">
 336                 <annotation>
 337                         <documentation>
 338                         Container for application-specific overrides
 339                         </documentation>
 340                 </annotation>
 341                 <complexType>
 342                         <sequence>
 343                                 <element ref="conf:Sessions"/>
 344                                 <element ref="conf:Errors" minOccurs="0"/>
 345                                 <element ref="conf:Policy" minOccurs="0"/>
 346                                 <element ref="conf:CredentialUse" minOccurs="0"/>
 347                                 <any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
 348                         </sequence>
 349                         <attribute name="id" type="string" use="required"/>
 350                         <attribute name="providerId" type="anyURI" use="optional"/>
 351                 <anyAttribute namespace="##any" processContents="lax"/>
 352                 </complexType>
 353         </element>
 354
 355         <element name="Sessions">
 356                 <annotation>
 357                         <documentation>Container for specifying app session establishment and policy</documentation>
 358                 </annotation>
 359                 <complexType>
 360             <complexContent>
 361                 <extension base="anyType">
 362                                         <attribute name="wayfURL" type="anyURI" use="required"/>
 363                                         <attribute name="shireURL" type="anyURI" use="required"/>
 364                                         <attribute name="shireSSL" type="boolean" use="optional"/>
 365                                         <attribute name="cookieName" type="string" use="required"/>
 366                                         <attribute name="cookieProps" type="string" use="optional"/>
 367                                         <attribute name="lifetime" type="unsignedInt" use="optional"/>
 368                                         <attribute name="timeout" type="unsignedInt" use="optional"/>
 369                                         <attribute name="checkAddress" type="boolean" use="optional"/>
 370                                 <anyAttribute namespace="##any" processContents="lax"/>
 371                 </extension>
 372             </complexContent>
 373                 </complexType>
 374         </element>
 375
 376         <element name="Errors">
 377                 <annotation>
 378                         <documentation>Container for error templates and associated details</documentation>
 379                 </annotation>
 380                 <complexType>
 381             <complexContent>
 382                 <extension base="anyType">
 383                         <attribute name="shire" type="anyURI" use="required"/>
 384                         <attribute name="rm" type="anyURI" use="required"/>
 385                         <attribute name="access" type="anyURI" use="required"/>
 386                         <attribute name="supportContact" type="string" use="required"/>
 387                         <attribute name="logoLocation" type="anyURI" use="required"/>
 388                         <anyAttribute namespace="##any" processContents="lax"/>
 389                 </extension>
 390             </complexContent>
 391                 </complexType>
 392         </element>
 393
 394         <element name="Policy">
 395                 <annotation>
 396                         <documentation>
 397                         Container for specifying various policies for attributes, trust, and federations
 398                         </documentation>
 399                 </annotation>
 400                 <complexType>
 401                         <sequence>
 402                                 <element ref="saml:AttributeDesignator" minOccurs="0" maxOccurs="unbounded"/>
 403                                 <element name="AAPProvider" type="conf:PluggableType" minOccurs="0" maxOccurs="unbounded"/>
 404                                 <element name="FederationProvider" type="conf:PluggableType" minOccurs="0" maxOccurs="unbounded"/>
 405                                 <element name="TrustProvider" type="conf:PluggableType" minOccurs="0" maxOccurs="unbounded"/>
 406                                 <element name="RevocationProvider" type="conf:PluggableType" minOccurs="0" maxOccurs="unbounded"/>
 407                                 <element ref="saml:Audience"  minOccurs="0" maxOccurs="unbounded"/>
 408                                 <any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
 409                         </sequence>
 410                         <attribute name="signRequest" type="boolean" use="optional" default="false"/>
 411                         <attribute name="signedResponse" type="boolean" use="optional" default="false"/>
 412                         <attribute name="signedAssertions" type="boolean" use="optional" default="false"/>
 413                 <anyAttribute namespace="##any" processContents="lax"/>
 414                 </complexType>
 415         </element>
 416
 417         <element name="CredentialUse">
 418                 <annotation>
 419                         <documentation>Container for specifying credentials to use</documentation>
 420                 </annotation>
 421                 <complexType>
 422                         <sequence>
 423                                 <element name="RelyingParty" minOccurs="0" maxOccurs="unbounded">
 424                                         <complexType>
 425                                                 <complexContent>
 426                                                         <extension base="anyType">
 427                                                                 <attribute name="Name" type="string" use="required"/>
 428                                                                 <attribute name="TLS" type="string" use="required"/>
 429                                                                 <attribute name="Signing" type="string" use="required"/>
 430                                                         </extension>
 431                                                 </complexContent>
 432                                         </complexType>
 433                                 </element>
 434                                 <any namespace="##other" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
 435                         </sequence>
 436                         <attribute name="TLS" type="string" use="required"/>
 437                         <attribute name="Signing" type="string" use="required"/>
 438                 <anyAttribute namespace="##any" processContents="lax"/>
 439                 </complexType>
 440         </element>
 441 </schema>
 442