WildFly Full 28 Model Reference

  1. home
  2. subsystem=iiop-openjdk

The iiop-openjdk subsystem configuration.

Provided capabilities(1)

Name Dynamic Other provider points
org.wildfly.iiop false

none

Attributes (34)

  • add-component-via-interceptor Indicates whether SSL components should be added by an IOR interceptor (on) or not (off).
    • Deprecated Since 1.0.0
    Indicates whether SSL components should be added by an IOR interceptor (on) or not (off).
    Attribute Value
    Default Value true
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • auth-method The authentication method. Valid values are 'none' and 'username_password'.
    • Attribute Value
    Default Value username_password
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values none
    username_password
  • authentication-context The name of the authentication context used when the security initializer is set to 'elytron'.
    • Attribute Value
    Capability reference
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • caller-propagation Indicates whether the caller identity should be propagated in the SAS context or not. Valid values are 'none' and 'supported'.
    • Attribute Value
    Default Value none
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values none
    supported
  • client-requires Value that indicates the client SSL required parameters (None, ServerAuth, ClientAuth, MutualAuth).
    • Deprecated Since 1.0.0
    Use client-requires-ssl instead.
    Attribute Value
    Default Value None
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values None
    ServerAuth
    ClientAuth
    MutualAuth
  • client-requires-ssl Indicates whether IIOP connections from the server require SSL.
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • client-ssl-context The name of the SSL context used to create client side SSL sockets.
    • Attribute Value
    Capability reference
    Type STRING
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • client-supports Value that indicates the client SSL supported parameters (None, ServerAuth, ClientAuth, MutualAuth).
    • Deprecated Since 1.0.0
    Use client-requires-ssl instead.
    Attribute Value
    Default Value MutualAuth
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values None
    ServerAuth
    ClientAuth
    MutualAuth
  • confidentiality Indicates whether the transport must require confidentiality protection or not. Valid values are 'none', 'supported' and 'required'.
    • Deprecated Since 1.0.0
    Use server-requires-ssl instead.
    Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values none
    supported
    required
  • detect-misordering Indicates whether the transport must require misordering detection or not. Valid values are 'none', 'supported' and 'required'.
    • Deprecated Since 1.0.0
    Use server-requires-ssl instead.
    Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values none
    supported
    required
  • detect-replay Indicates whether the transport must require replay detection or not. Valid values are 'none', 'supported' and 'required'.
    • Deprecated Since 1.0.0
    Use server-requires-ssl instead.
    Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values none
    supported
    required
  • export-corbaloc Indicates whether the root context should be exported as corbaloc::address:port/NameService (on) or not (off).
    • Attribute Value
    Default Value true
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • giop-version The GIOP version to be used.
    • Attribute Value
    Default Value 1.2
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • high-water-mark TCP connection cache parameter. Each time the number of connections exceeds this value ORB tries to reclaim connections. Number of reclaimed connections is specified by tcp-number-to-reclaim property. If this property is not set then it is configured as OpenJDK ORB default.
    • Attribute Value
    Type INT
    Nillable true
    Expressions Allowed true
    Min 0
    Max 2,147,483,647
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • integrity Indicates whether the transport must require integrity protection or not. Valid values are 'none', 'supported' and 'required'.
    • Deprecated Since 1.0.0
    Use server-requires-ssl instead.
    Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values none
    supported
    required
  • iona Indicates whether interoperability with IONA's ASP is enabled.
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • number-to-reclaim TCP connection cache parameter. Each time number of connections exceeds tcp-high-water-mark property then ORB tries to reclaim connections. Number of reclaimed connections is specified by this property. If it is not set then it is configured as OpenJDK ORB default.
    • Attribute Value
    Type INT
    Nillable true
    Expressions Allowed true
    Min 0
    Max 2,147,483,647
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • persistent-server-id Persistent id of the server. Persistent object references are valid across many activactions of the server and they identify it using this property. As a result of that: many activations of the same server should have this property set to the same value, different server instances running on the same host should have different server ids.
    • Attribute Value
    Default Value 1
    Type STRING
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • properties A list of generic key/value properties.
    • Attribute Value
    Type OBJECT
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • realm The authentication service (AS) realm name.
    • Deprecated Since 3.0.0
    Uses of security-realm should migrate to references of security-domain and ssl-context capabilities.
    Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • required Indicates if authentication is required (true) or not (false).
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • root-context The naming service root context.
    • Attribute Value
    Default Value JBoss/Naming/root
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • security iiop-openjdk.security=Indicates whether the security interceptors are to be installed (elytron) or not (none). identity and client are legacy security configurations which are valid for compatibility reasons but are no longer supported.
    • Attribute Value
    Default Value none
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values identity
    client
    elytron
    none
  • security-domain The name of the security domain that holds the key and trust stores that will be used to establish SSL connections.
    • Deprecated Since 3.0.0
    Legacy security domains are not supported in a running server. Only usable in a domain configuration to support secondary hosts running earlier versions.
    Attribute Value
    Capability reference org.wildfly.security.legacy-security-domain
    Type STRING
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • server-requires Value that indicates the server SSL required parameters (None, ServerAuth, ClientAuth, MutualAuth).
    • Deprecated Since 1.0.0
    Use server-requires-ssl instead.
    Attribute Value
    Default Value None
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values None
    ServerAuth
    ClientAuth
    MutualAuth
  • server-requires-ssl Indicates whether IIOP connections to the server require SSL.
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • server-ssl-context The name of the SSL context used to create server side SSL sockets.
    • Attribute Value
    Capability reference
    Type STRING
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • server-supports Value that indicates the server SSL supported parameters (None, ServerAuth, ClientAuth, MutualAuth).
    • Deprecated Since 1.0.0
    Use server-requires-ssl instead.
    Attribute Value
    Default Value MutualAuth
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values None
    ServerAuth
    ClientAuth
    MutualAuth
  • socket-binding The name of the socket binding configuration that specifies the ORB port. At least one of socket-binding, ssl-socket-binding parameters have to be configured.
    • Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • ssl-socket-binding The name of the socket binding configuration that specifies the ORB SSL port. At least one of socket-binding, ssl-socket-binding parameters have to be configured.
    • Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • support-ssl Indicates whether SSL is to be supported (on) or not (off).
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
  • transactions Indicates whether the transactions interceptors are to be installed (full or spec) or not (none). The value 'full' enabled JTS while 'spec' enables a spec compliant mode (non JTS) that rejects incoming transaction contexts.
    • Attribute Value
    Default Value none
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values full
    none
    spec
  • trust-in-client Indicates if the transport must require trust in client to be established. Valid values are 'none', 'supported' and 'required'.
    • Deprecated Since 1.0.0
    Use server-requires-ssl instead.
    Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values none
    supported
    required
  • trust-in-target Indicates if the transport must require trust in target to be established. Valid values are 'none' and 'supported'.
    • Deprecated Since 1.0.0
    Use server-requires-ssl instead.
    Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values none
    supported

Operations (2)

  • add Adds the iiop-openjdk subsystem.
    Request Parameter Type Required Expressions Allowed Default value Description
    properties OBJECT false true A list of generic key/value properties.
    auth-method STRING false true username_password The authentication method. Valid values are 'none' and 'username_password'.
    realm STRING false true The authentication service (AS) realm name.
    required BOOLEAN false true false Indicates if authentication is required (true) or not (false).
    authentication-context STRING false true The name of the authentication context used when the security initializer is set to 'elytron'.
    security STRING false true none iiop-openjdk.security=Indicates whether the security interceptors are to be installed (elytron) or not (none). identity and client are legacy security configurations which are valid for compatibility reasons but are no longer supported.
    transactions STRING false true none Indicates whether the transactions interceptors are to be installed (full or spec) or not (none). The value 'full' enabled JTS while 'spec' enables a spec compliant mode (non JTS) that rejects incoming transaction contexts.
    iona BOOLEAN false true false Indicates whether interoperability with IONA's ASP is enabled.
    export-corbaloc BOOLEAN false true true Indicates whether the root context should be exported as corbaloc::address:port/NameService (on) or not (off).
    root-context STRING false true JBoss/Naming/root The naming service root context.
    giop-version STRING false true 1.2 The GIOP version to be used.
    persistent-server-id STRING false false 1 Persistent id of the server. Persistent object references are valid across many activactions of the server and they identify it using this property. As a result of that: many activations of the same server should have this property set to the same value, different server instances running on the same host should have different server ids.
    socket-binding STRING false false The name of the socket binding configuration that specifies the ORB port. At least one of socket-binding, ssl-socket-binding parameters have to be configured.
    ssl-socket-binding STRING false false The name of the socket binding configuration that specifies the ORB SSL port. At least one of socket-binding, ssl-socket-binding parameters have to be configured.
    caller-propagation STRING false true none Indicates whether the caller identity should be propagated in the SAS context or not. Valid values are 'none' and 'supported'.
    add-component-via-interceptor BOOLEAN false true true Indicates whether SSL components should be added by an IOR interceptor (on) or not (off).
    client-requires STRING false true None Value that indicates the client SSL required parameters (None, ServerAuth, ClientAuth, MutualAuth).
    client-requires-ssl BOOLEAN false true false Indicates whether IIOP connections from the server require SSL.
    client-ssl-context STRING false false The name of the SSL context used to create client side SSL sockets.
    client-supports STRING false true MutualAuth Value that indicates the client SSL supported parameters (None, ServerAuth, ClientAuth, MutualAuth).
    security-domain STRING false false The name of the security domain that holds the key and trust stores that will be used to establish SSL connections.
    server-requires STRING false true None Value that indicates the server SSL required parameters (None, ServerAuth, ClientAuth, MutualAuth).
    server-requires-ssl BOOLEAN false true false Indicates whether IIOP connections to the server require SSL.
    server-ssl-context STRING false false The name of the SSL context used to create server side SSL sockets.
    server-supports STRING false true MutualAuth Value that indicates the server SSL supported parameters (None, ServerAuth, ClientAuth, MutualAuth).
    support-ssl BOOLEAN false true false Indicates whether SSL is to be supported (on) or not (off).
    high-water-mark INT false true TCP connection cache parameter. Each time the number of connections exceeds this value ORB tries to reclaim connections. Number of reclaimed connections is specified by tcp-number-to-reclaim property. If this property is not set then it is configured as OpenJDK ORB default.
    number-to-reclaim INT false true TCP connection cache parameter. Each time number of connections exceeds tcp-high-water-mark property then ORB tries to reclaim connections. Number of reclaimed connections is specified by this property. If it is not set then it is configured as OpenJDK ORB default.
    confidentiality STRING false true Indicates whether the transport must require confidentiality protection or not. Valid values are 'none', 'supported' and 'required'.
    detect-misordering STRING false true Indicates whether the transport must require misordering detection or not. Valid values are 'none', 'supported' and 'required'.
    detect-replay STRING false true Indicates whether the transport must require replay detection or not. Valid values are 'none', 'supported' and 'required'.
    integrity STRING false true Indicates whether the transport must require integrity protection or not. Valid values are 'none', 'supported' and 'required'.
    trust-in-client STRING false true Indicates if the transport must require trust in client to be established. Valid values are 'none', 'supported' and 'required'.
    trust-in-target STRING false true Indicates if the transport must require trust in target to be established. Valid values are 'none' and 'supported'.
  • remove Removes the iiop-openjdk subsystem.