urn:infinispan:server:10.0

interfaces

interface*

Name	Type	Default	Description
name	string

inet-address

Name	Type	Default	Description
value	string

global

link-local

loopback

non-loopback

site-local

match-interface

Name	Type	Default	Description
value	FIXME

match-address

Name	Type	Default	Description
value	FIXME

socket-bindings

Name	Type	Default	Description
default-interface	string
port-offset	string

socket-binding*

security

security-realms

security-realm+

Name	Type	Default	Description
name	string

server-identities?

ssl

keystore

Name	Type	Default	Description
path	string
relative-to	string
keystore-password	string
alias	string
key-password	string
generate-self-signed-certificate-host	string

engine?

Name	Type	Default	Description
enabled-protocols
enabled-ciphersuites	string

filesystem-realm?

Name	Type	Default
name	string	filesystem
path	string
relative-to	string	infinispan.server.data.path
levels	int	0
encoded	boolean	true

kerberos-realm?

Name	Type	Default	Description
keytab-path	string
relative-to	string

ldap-realm?

Name	Type	Default	Description
name	string
url	string
principal	string
credential	string
direct-verification	boolean
page-size	int
search-dn	string
rdn-identifier	string

identity-mapping?

Name	Type	Default	Description
rdn-identifier	string
search-dn	string

attribute-mapping?

attribute+

Name	Type	Default	Description
filter	string
filter-dn	string
from	string
to	string

user-password-mapper?

Name	Type	Default	Description
from	string
verifiable	boolean
writable	boolean

local-realm?

Name	Type	Default	Description
name	string	local

properties-realm?

Name	Type	Default	Description
groups-attribute	string

user-properties

Name	Type	Default
path	string
relative-to	string
digest-realm-name	string
plain-text	boolean	false

group-properties

Name	Type	Default	Description
path	string
relative-to	string

token-realm?

Name	Type	Default	Description
name	string	token
principal-claim	string	username

jwt

Name	Type	Default	Description
issuer
audience
public-key	string
jku-timeout	long
client-ssl-context	string

oauth2-introspection

Name	Type	Default	Description
client-id	string
client-secret	string
introspection-url	string
client-ssl-context	string
host-name-verification-policy	string

truststore-realm?

Name	Type	Default
path	string
provider	string
keystore-password	string
relative-to	string	infinispan.server.data.path

endpoints

Name	Type	Default	Description
socket-binding	string		The socket on which the endpoint connector will bind itself
security-realm	string		The name of the security realm to use for authentication/authorization/encryption

hotrod-connector?

Name	Type	Default	Description
external-host	string		Sets the external address of this node, i.e. the address which clients will connect to. Defaults to the server's socket-binding address
external-port	int		Sets the external port of this node, i.e. the port which clients will connect to. Defaults to the server's socket-binding port

topology-state-transfer?

Name	Type	Default	Description
lock-timeout	int		Configures the lock acquisition timeout for the topology cache. Defaults to 10 seconds
replication-timeout	int		Configures the replication timeout for the topology cache. Defaults to 10 seconds
lazy-retrieval	boolean	false	Configures whether to enable state transfer for the topology cache. If enabled, a ClusterCacheLoader will be used to lazily retrieve topology information from the other nodes. Defaults to false.
await-initial-retrieval	boolean	${Server.TopologyStateTransfer.await-initial-retrieval}	Configures whether to initial state retrieval should happen immediately at startup. Only applies when lazy-retrieval is false. Defaults to true.

authentication?

Name	Type	Default	Description
security-realm	string		The name of the security realm to use for authentication/authorization.

sasl?

The configuration of the SASL authentication layer for this server. The optional nested "include-mechanisms" element contains a whitelist of allowed SASL mechanism names. No mechanisms will be allowed which are not present in this list. The optional nested "qop" element contains a list of quality-of-protection values, in decreasing order of preference. The optional nested "strength" element contains a list of cipher strength values, in decreasing order of preference. The optional nested "policy" boolean element specifies a policy to use to narrow down the available set of mechanisms. The optional nested "property" elements specify additional properties required by the specified mechanisms

Name	Type	Description
server-context-name	string	The name of the login context to be used to retrieve a server subject for certain SASL mechs (i.e. GSSAPI)
server-name	string	The name the server which is exposed to clients
mechanisms
qop
strength

policy?

Policy criteria items to use in order to choose a SASL mechanism. The optional nested "forward-secrecy" element contains a boolean value which specifies whether mechanisms that implement forward secrecy between sessions are required. Forward secrecy means that breaking into one session will not automatically provide information for breaking into future sessions. The optional nested "no-active" element contains a boolean value which specifies whether mechanisms susceptible to active (non-dictionary) attacks are not permitted. "false" to permit, "true" to deny. The optional nested "no-anonymous" element contains a boolean value which specifies whether mechanisms that accept anonymous login are permitted. "false" to permit, "true" to deny. The optional nested "no-dictionary" element contains a boolean value which specifies whether mechanisms susceptible to passive dictionary attacks are permitted. "false" to permit, "true" to deny. The optional nested "no-plain-text" element contains a boolean value which specifies whether mechanisms susceptible to simple plain passive attacks (e.g., "PLAIN") are not permitted. "false" to permit, "true" to deny. The optional nested "pass-credentials" element contains a boolean value which specifies whether mechanisms that pass client credentials are required.