Dorian Configuration

Dorian: Administrators Guide | Developers Guide | Users Guide | caGrid: Documentation Guides

Spring Framework

Properties

This section documents the configuration properties specified in the Dorian properties file. Properties that need to be edited for most deployments are shown in bold.

Core Properties

Identity Provider Properties

Federation Properties

Certificate Authority Properties

Configuration Beans

This section documents the common edits that operators of Dorian might make to the beans in the Dorian configuration file.

Identity Provider Registration Policy

The Identity Provider Registration Policy specifies to Dorian what to do when a user registers for an account with the Dorian Identity Provider.    This policy is represented and enforced by a Java class that implements the interfaceorg.cagrid.gaards.dorian.idp.IdPRegistrationPolicy.  This allows custom policies to be plugged in for handling user registrations.  In the Dorian Configuration, the Identity Provider Registration Policy is represented by the registrationPolicy bean:

<bean id="registrationPolicy" class="org.cagrid.gaards.dorian.idp.ManualRegistrationPolicy" />

Out of the box Dorian supports two registration policies; (1) Automatic Registration which automatically issues an account for each user that registers, this policy is represented by the org.cagrid.gaards.dorian.idp.AutomaticRegistrationPolicy class and (2) Manual Registration which requires an administrator to approve each user that registers, this policy is represented by the org.cagrid.gaards.dorian.idp.ManualRegistrationPolicy class.

Certificate Authority

Dorian supports the multiple implementations for Certificate Authorities.   A Certificate Authority is implemented by extending the org.cagrid.gaards.dorian.ca.CertificateAuthority abstract class.  A Certificate Authority implementation is configured in the Dorian Configuration file with the certificateAuthority bean.   Out of the box Dorian supports two Certificate Authority implementations: (1) A Database Certificate Authority (org.cagrid.gaards.dorian.ca.DBCertificateAuthority) which persists CA information in Dorian's Mysql database and (2) A Hardware Security Module Certificate Authority (org.cagrid.gaards.dorian.ca.EracomCertificateAuthority) which generates and stores the CA keys in a SafeNet Protect Server Gold Hardware Security Module (HSM) and persists the certificate authority information in Dorian's Mysql database.  Below we show the valid configurations for each of these certificate authorites.

Database Certificate Authority

<bean id="certificateAuthority" class="org.cagrid.gaards.dorian.ca.DBCertificateAuthority">
		<constructor-arg index="0" ref="database" />
		<constructor-arg index="1" ref="caProperties" />
	</bean>
	<bean id="caProperties" class="org.cagrid.gaards.dorian.ca.CertificateAuthorityProperties">
		<constructor-arg index="0" value="${gaards.dorian.ca.password}" />
                <constructor-arg index="1" value="${gaards.dorian.ca.policy.oid}" />
		<constructor-arg index="2" value="${gaards.dorian.ca.issued.cert.key.size}" />
		<constructor-arg index="3" value="${gaards.dorian.ca.auto.create}" />
		<constructor-arg index="4" ref="caCreationPolicy" />
		<constructor-arg index="5" value="${gaards.dorian.ca.auto.renew}" />
		<constructor-arg index="6" ref="caRenewalLifetime" />
	</bean>

SafeNet Protect Server Gold Certificate Authority

If using the SafeNet Protect Server Gold Certificate Authority you must specify the gaards.dorian.ca.eracom.slot in the Dorian properties file.  You must also install the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files ([Java 5|http://java.sun.com/javase/downloads/index_jdk5.jsp], [Java 6|http://java.sun.com/javase/downloads/index.jsp]) in your JVM.

   <bean id="certificateAuthority" class="org.cagrid.gaards.dorian.ca.EracomCertificateAuthority">
		<constructor-arg index="0" ref="eracomCAProperties"/>
   </bean>
   <bean id="eracomCAProperties" class="org.cagrid.gaards.dorian.ca.EracomCertificateAuthorityProperties">
		<constructor-arg index="0" value="${gaards.dorian.ca.password}" />
		<constructor-arg index="1" value="${gaards.dorian.ca.policy.oid}" />
		<constructor-arg index="2" value="${gaards.dorian.ca.issued.cert.key.size}"/>
                <constructor-arg index="3" value="${gaards.dorian.ca.auto.create}" />
                <constructor-arg index="4" ref="caCreationPolicy" />
                <constructor-arg index="5" value="${gaards.dorian.ca.auto.renew}" />
                <constructor-arg index="6" ref="caRenewalLifetime" />
                <constructor-arg index="7" value="${gaards.dorian.ca.eracom.slot}" />
</bean>