WildFly 36 Model Reference

The iiop-openjdk subsystem configuration.

Provided capabilities(1)

Name Dynamic Other provider points
org.wildfly.iiop false

none

Attributes (34)

  • add-component-via-interceptor Indicates whether SSL components should be added by an IOR interceptor (on) or not (off).
    • Deprecated Since 1.0.0
    Indicates whether SSL components should be added by an IOR interceptor (on) or not (off).
    Attribute Value
    Default Value true
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • auth-method The authentication method. Valid values are 'none' and 'username_password'.
    • Attribute Value
    Default Value username_password
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values none
    username_password
    Stability default
  • authentication-context The name of the authentication context used when the security initializer is set to 'elytron'.
    • Attribute Value
    Capability reference
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • caller-propagation Indicates whether the caller identity should be propagated in the SAS context or not. Valid values are 'none' and 'supported'.
    • Attribute Value
    Default Value none
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values none
    supported
    Stability default
  • client-requires Value that indicates the client SSL required parameters (None, ServerAuth, ClientAuth, MutualAuth).
    • Deprecated Since 1.0.0
    Use client-requires-ssl instead.
    Attribute Value
    Default Value None
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values None
    ServerAuth
    ClientAuth
    MutualAuth
    Stability default
  • client-requires-ssl Indicates whether IIOP connections from the server require SSL.
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • client-ssl-context The name of the SSL context used to create client side SSL sockets.
    • Attribute Value
    Capability reference
    Type STRING
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • client-supports Value that indicates the client SSL supported parameters (None, ServerAuth, ClientAuth, MutualAuth).
    • Deprecated Since 1.0.0
    Use client-requires-ssl instead.
    Attribute Value
    Default Value MutualAuth
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values None
    ServerAuth
    ClientAuth
    MutualAuth
    Stability default
  • confidentiality Indicates whether the transport must require confidentiality protection or not. Valid values are 'none', 'supported' and 'required'.
    • Deprecated Since 1.0.0
    Use server-requires-ssl instead.
    Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values none
    supported
    required
    Stability default
  • detect-misordering Indicates whether the transport must require misordering detection or not. Valid values are 'none', 'supported' and 'required'.
    • Deprecated Since 1.0.0
    Use server-requires-ssl instead.
    Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values none
    supported
    required
    Stability default
  • detect-replay Indicates whether the transport must require replay detection or not. Valid values are 'none', 'supported' and 'required'.
    • Deprecated Since 1.0.0
    Use server-requires-ssl instead.
    Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values none
    supported
    required
    Stability default
  • export-corbaloc Indicates whether the root context should be exported as corbaloc::address:port/NameService (on) or not (off).
    • Attribute Value
    Default Value true
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • giop-version The GIOP version to be used.
    • Attribute Value
    Default Value 1.2
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • high-water-mark TCP connection cache parameter. Each time the number of connections exceeds this value ORB tries to reclaim connections. Number of reclaimed connections is specified by tcp-number-to-reclaim property. If this property is not set then it is configured as OpenJDK ORB default.
    • Attribute Value
    Type INT
    Nillable true
    Expressions Allowed true
    Min 0
    Max 2,147,483,647
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • integrity Indicates whether the transport must require integrity protection or not. Valid values are 'none', 'supported' and 'required'.
    • Deprecated Since 1.0.0
    Use server-requires-ssl instead.
    Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values none
    supported
    required
    Stability default
  • iona Indicates whether interoperability with IONA's ASP is enabled.
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • number-to-reclaim TCP connection cache parameter. Each time number of connections exceeds tcp-high-water-mark property then ORB tries to reclaim connections. Number of reclaimed connections is specified by this property. If it is not set then it is configured as OpenJDK ORB default.
    • Attribute Value
    Type INT
    Nillable true
    Expressions Allowed true
    Min 0
    Max 2,147,483,647
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • persistent-server-id Persistent id of the server. Persistent object references are valid across many activactions of the server and they identify it using this property. As a result of that: many activations of the same server should have this property set to the same value, different server instances running on the same host should have different server ids.
    • Attribute Value
    Default Value 1
    Type STRING
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • properties A list of generic key/value properties.
    • Attribute Value
    Type OBJECT
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • realm The authentication service (AS) realm name.
    • Deprecated Since 3.0.0
    Uses of security-realm should migrate to references of security-domain and ssl-context capabilities.
    Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • required Indicates if authentication is required (true) or not (false).
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • root-context The naming service root context.
    • Attribute Value
    Default Value JBoss/Naming/root
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • security iiop-openjdk.security=Indicates whether the security interceptors are to be installed (elytron) or not (none). identity and client are legacy security configurations which are valid for compatibility reasons but are no longer supported.
    • Attribute Value
    Default Value none
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values identity
    client
    elytron
    none
    Stability default
  • security-domain The name of the security domain that holds the key and trust stores that will be used to establish SSL connections.
    • Deprecated Since 3.0.0
    Legacy security domains are not supported in a running server. Only usable in a domain configuration to support secondary hosts running earlier versions.
    Attribute Value
    Capability reference org.wildfly.security.legacy-security-domain
    Type STRING
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • server-requires Value that indicates the server SSL required parameters (None, ServerAuth, ClientAuth, MutualAuth).
    • Deprecated Since 1.0.0
    Use server-requires-ssl instead.
    Attribute Value
    Default Value None
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values None
    ServerAuth
    ClientAuth
    MutualAuth
    Stability default
  • server-requires-ssl Indicates whether IIOP connections to the server require SSL.
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • server-ssl-context The name of the SSL context used to create server side SSL sockets.
    • Attribute Value
    Capability reference
    Type STRING
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • server-supports Value that indicates the server SSL supported parameters (None, ServerAuth, ClientAuth, MutualAuth).
    • Deprecated Since 1.0.0
    Use server-requires-ssl instead.
    Attribute Value
    Default Value MutualAuth
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values None
    ServerAuth
    ClientAuth
    MutualAuth
    Stability default
  • socket-binding The name of the socket binding configuration that specifies the ORB port. At least one of socket-binding, ssl-socket-binding parameters have to be configured.
    • Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • ssl-socket-binding The name of the socket binding configuration that specifies the ORB SSL port. At least one of socket-binding, ssl-socket-binding parameters have to be configured.
    • Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed false
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • support-ssl Indicates whether SSL is to be supported (on) or not (off).
    • Attribute Value
    Default Value false
    Type BOOLEAN
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Stability default
  • transactions Indicates whether the transactions interceptors are to be installed (full or spec) or not (none). The value 'full' enabled JTS while 'spec' enables a spec compliant mode (non JTS) that rejects incoming transaction contexts.
    • Attribute Value
    Default Value none
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values full
    none
    spec
    Stability default
  • trust-in-client Indicates if the transport must require trust in client to be established. Valid values are 'none', 'supported' and 'required'.
    • Deprecated Since 1.0.0
    Use server-requires-ssl instead.
    Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values none
    supported
    required
    Stability default
  • trust-in-target Indicates if the transport must require trust in target to be established. Valid values are 'none' and 'supported'.
    • Deprecated Since 1.0.0
    Use server-requires-ssl instead.
    Attribute Value
    Type STRING
    Nillable true
    Expressions Allowed true
    Storage configuration
    Access Type read-write
    Restart Required all-services
    Allowed Values none
    supported
    Stability default

Operations (2)

  • add Adds the iiop-openjdk subsystem.
    Request Parameter Type Required Expressions Allowed Default value Description
    properties OBJECT false true A list of generic key/value properties.
    auth-method STRING false true username_password The authentication method. Valid values are 'none' and 'username_password'.
    realm STRING false true The authentication service (AS) realm name.
    required BOOLEAN false true false Indicates if authentication is required (true) or not (false).
    authentication-context STRING false true The name of the authentication context used when the security initializer is set to 'elytron'.
    security STRING false true none iiop-openjdk.security=Indicates whether the security interceptors are to be installed (elytron) or not (none). identity and client are legacy security configurations which are valid for compatibility reasons but are no longer supported.
    transactions STRING false true none Indicates whether the transactions interceptors are to be installed (full or spec) or not (none). The value 'full' enabled JTS while 'spec' enables a spec compliant mode (non JTS) that rejects incoming transaction contexts.
    iona BOOLEAN false true false Indicates whether interoperability with IONA's ASP is enabled.
    export-corbaloc BOOLEAN false true true Indicates whether the root context should be exported as corbaloc::address:port/NameService (on) or not (off).
    root-context STRING false true JBoss/Naming/root The naming service root context.
    giop-version STRING false true 1.2 The GIOP version to be used.
    persistent-server-id STRING false false 1 Persistent id of the server. Persistent object references are valid across many activactions of the server and they identify it using this property. As a result of that: many activations of the same server should have this property set to the same value, different server instances running on the same host should have different server ids.
    socket-binding STRING false false The name of the socket binding configuration that specifies the ORB port. At least one of socket-binding, ssl-socket-binding parameters have to be configured.
    ssl-socket-binding STRING false false The name of the socket binding configuration that specifies the ORB SSL port. At least one of socket-binding, ssl-socket-binding parameters have to be configured.
    caller-propagation STRING false true none Indicates whether the caller identity should be propagated in the SAS context or not. Valid values are 'none' and 'supported'.
    add-component-via-interceptor BOOLEAN false true true Indicates whether SSL components should be added by an IOR interceptor (on) or not (off).
    client-requires STRING false true None Value that indicates the client SSL required parameters (None, ServerAuth, ClientAuth, MutualAuth).
    client-requires-ssl BOOLEAN false true false Indicates whether IIOP connections from the server require SSL.
    client-ssl-context STRING false false The name of the SSL context used to create client side SSL sockets.
    client-supports STRING false true MutualAuth Value that indicates the client SSL supported parameters (None, ServerAuth, ClientAuth, MutualAuth).
    security-domain STRING false false The name of the security domain that holds the key and trust stores that will be used to establish SSL connections.
    server-requires STRING false true None Value that indicates the server SSL required parameters (None, ServerAuth, ClientAuth, MutualAuth).
    server-requires-ssl BOOLEAN false true false Indicates whether IIOP connections to the server require SSL.
    server-ssl-context STRING false false The name of the SSL context used to create server side SSL sockets.
    server-supports STRING false true MutualAuth Value that indicates the server SSL supported parameters (None, ServerAuth, ClientAuth, MutualAuth).
    support-ssl BOOLEAN false true false Indicates whether SSL is to be supported (on) or not (off).
    high-water-mark INT false true TCP connection cache parameter. Each time the number of connections exceeds this value ORB tries to reclaim connections. Number of reclaimed connections is specified by tcp-number-to-reclaim property. If this property is not set then it is configured as OpenJDK ORB default.
    number-to-reclaim INT false true TCP connection cache parameter. Each time number of connections exceeds tcp-high-water-mark property then ORB tries to reclaim connections. Number of reclaimed connections is specified by this property. If it is not set then it is configured as OpenJDK ORB default.
    confidentiality STRING false true Indicates whether the transport must require confidentiality protection or not. Valid values are 'none', 'supported' and 'required'.
    detect-misordering STRING false true Indicates whether the transport must require misordering detection or not. Valid values are 'none', 'supported' and 'required'.
    detect-replay STRING false true Indicates whether the transport must require replay detection or not. Valid values are 'none', 'supported' and 'required'.
    integrity STRING false true Indicates whether the transport must require integrity protection or not. Valid values are 'none', 'supported' and 'required'.
    trust-in-client STRING false true Indicates if the transport must require trust in client to be established. Valid values are 'none', 'supported' and 'required'.
    trust-in-target STRING false true Indicates if the transport must require trust in target to be established. Valid values are 'none' and 'supported'.
  • remove Removes the iiop-openjdk subsystem.