Enabling security with federated repositories

#-----------------------------------------------------------------
# Licensed Materials - Property of IBM
#
# WebSphere Commerce
#
# (C) Copyright IBM Corp. 2006, 2010 All Rights Reserved.
#
# US Government Users Restricted Rights - Use, duplication or
# disclosure restricted by GSA ADP Schedule Contract with
# IBM Corp.
#-----------------------------------------------------------------

# LDAP server type
#     Accepted values: (IDS, DOMINO, SUNONE, AD, NDS, CUSTOM)
#         IDS = IBM Directory Server
#         DOMINO = IBM Lotus Domino
#         SUNONE = Sun Java System Directory Server
#         AD = Microsoft Windows Active Directory
#         NDS = Novell Directory Services
#         CUSTOM = Custom 
#--------------------------------------------------------
vmm.ldapType=CUSTOM

# Fully qualified LDAP server host name
#--------------------------------------------------------
vmm.ldapHost=wcinstall08.torolab.ibm.com

# LDAP server port number
#--------------------------------------------------------
vmm.ldapPort=389

# Specifies whether the LDAP server requires an SSL connection
# 	Accepted values are: (true, false)
#--------------------------------------------------------
vmm.ldapWithSSL=false

# The keystore file path for SSL commnication to LDAP
#--------------------------------------------------------
vmm.keystorePath=

# The keystore password 
# (To avoid decrypting warnings in the log, it is strongly recommended to use 
# the ASCII encrypted string generated from the <WCInstallDir>/bin/wcs_encrypt.bat 
# command without the merchant key option.)
#--------------------------------------------------------
vmm.keystorePassword=

# LDAP search base distinguished name
#--------------------------------------------------------
vmm.baseDN=o=root organization

# LDAP administrator distinguished name
#--------------------------------------------------------
vmm.ldapAdminDN=cn=root

# LDAP administrator password
# (To avoid decrypting warnings in the log, it is strongly recommended to use 
# the ASCII encrypted string generated from the <WCInstallDir>/bin/wcs_encrypt.bat 
# command without the merchant key option.)
#--------------------------------------------------------
vmm.ldapAdminPassword=EaDPFd9VAf0=

# LDAP user search filter
#--------------------------------------------------------
vmm.ldapUserFilter=(&(uid=%v)(objectclass=inetOrgPerson))

# LDAP user prefix (for example, uid)
#--------------------------------------------------------
vmm.userPrefix=uid

# LDAP organization prefix (for example, o)
#--------------------------------------------------------
vmm.orgPrefix=o

# LDAP organizational unit prefix (for example, ou)
#--------------------------------------------------------
vmm.orgUnitPrefix=ou

# LDAP user object class (for example,  inetOrgPerson)
#--------------------------------------------------------
vmm.userObjClass=inetOrgPerson

# LDAP organization object class
#  (for example, organization)
#--------------------------------------------------------
vmm.orgObjClass=organization

# LDAP organizational unit object class
# (for example,  organizationalUnit)
#--------------------------------------------------------
vmm.orgUnitObjClass=organizationalUnit

# LDAP bind distinguished name
#--------------------------------------------------------
vmm.bindDN=cn=root

# LDAP bind password
# (To avoid decrypting warnings in the log, it is strongly recommended to use 
# the ASCII encrypted string generated from the <WCInstallDir>/bin/wcs_encrypt.bat 
# command without the merchant key option.)
#--------------------------------------------------------
vmm.bindPassword=EaDPFd9VAf0=

# A full DN that maps to the WebSphere Commerce root organization
#--------------------------------------------------------
vmm.rootOrgDN=o=root organization

# A full DN that maps to the WebSphere Commerce default organization
#--------------------------------------------------------
vmm.defaultOrgDN=o=default organization,o=root organization

# Specifies the property names to use to log into the application server.
# This field takes multiple login properties, delimited by a semicolon (;).
# For example, uid;mail. All login properties are searched during login.
# If multiple entries or no entries are found, an exception is thrown.
# For example, if you specify the login properties as uid;mail and the login ID as Bob,
# the search filter searches for uid=Bob or mail=Bob. When the search returns a single entry,
# then authentication can proceed. Otherwise, an exception is thrown.
#--------------------------------------------------------
vmm.ldapLoginProp=uid;cn

# The realm name, default to WC_<instanceName>_Realm.
#--------------------------------------------------------
vmm.realmName=myrealm

# The primary admin user id for the administrative security.
# If global security is already enabled, input the primary user
# currently using.
# Otherwise, input a user which does not exist in the federated
# repositories, the tool will create it into the WebSphere Application
# Server built-in file base user repository.
#--------------------------------------------------------
vmm.primaryAdminId=configadmin

# The primary admin user password for the administrative security.
# (To avoid decrypting warnings in the log, it is strongly recommended to use 
# the ASCII encrypted string generated from the <WCInstallDir>/bin/wcs_encrypt.bat 
# command without the merchant key option.)
#--------------------------------------------------------
vmm.primaryAdminPwd=Ua4xMY1lGEqYbwa0gxDxGg==

# Specifies whether to enable application security. (Accepted values are: true / false)
#--------------------------------------------------------
vmm.enableAppSecurity=true


# The WAS security user ID (The RunAs User ID, only required
#  when vmm.enableAppSecurity=true )
#--------------------------------------------------------
vmm.securityID=uid=rudy,o=default organization,o=root organization

# The WAS security user password (The RunAs user password,
#  only required when vmm.enableAppSecurity=true)
# (To avoid decrypting warnings in the log, it is strongly recommended to use 
# the ASCII encrypted string generated from the <WCInstallDir>/bin/wcs_encrypt.bat 
# command without the merchant key option.)
#--------------------------------------------------------
vmm.securityPwd=xK36ck80s6GCL9+YsULolg==