<Config>

<!-- Name of the LDAP server. -->

<Server>servername</Server>

<!-- Port number where the LDAP server listens. The
default port is 389. -->

<Port>389</Port>

<!-- LDAP distinguished name that the RSSE application uses for a query operation to the LDAP server. The Open Security application uses this account to validate users, roles, ACLs, and other Encyclopedia user information. Account with READ privilege is sufficient. -->

<QueryAccount>uid=admin, ou=Administrators,
ou=TopologyManagement, o=NetscapeRoot</QueryAccount>

<!-- Password for the LDAP account specified by the QueryAccount parameter. -->

<QueryPassword>actuate</QueryPassword>

<!-- LDAP distinguished name that the RSSE application uses to locate the LDAP user object, including attributes for the organizational unit, ou, and domain components, dc. -->

<UserBaseDN>ou=AcUsers,dc=actuate,dc=com</UserBaseDN>

<!-- Name of LDAP object class that the Actuate open security application uses to find Actuate user names. -->

<UserObject>inetorgperson</UserObject>

<AdminRole>AcAdmin</AdminRole>

<OperatorRole>AcAdmin</OperatorRole>

<!-- LDAP role object that maps to the All role in the Encyclopedia volume. -->

<AllRole>All</AllRole>

<!-- LDAP distinguished name that the RSSE application uses to locate the LDAP role object. -->

<RoleBaseDN>ou=AcRoles,dc=actuate, dc=com</RoleBaseDN>

<!-- LDAP object class that the Actuate open security application uses to find Actuate role names. -->

<RoleObject>groupofuniquenames</RoleObject>

<!-- LDAP distinguished name that the RSSE application uses to locate the LDAP Actuate notification group object. GroupBaseDN can be the same as the role DN, if Group information is not separately maintained. -->

<GroupBaseDN>ou=groups,dc=actuate, dc=com</GroupBaseDN>

<!-- LDAP object class that the Actuate open security
application uses to find Actuate notification group
names. -->

<GroupObject>groupofuniquenames</GroupObject>

<!-- Name of the LDAP group used for notifications of all job requests made in the iHub. The base DN is obtained from GroupBaseDN. -->

<GroupToNotify>specialGroup</GroupToNotify>

<!-- LDAP attribute used to retrieve the EmailAddress property of the user. No default value. -->

<EmailAddressAttr>mail</EmailAddressAttr>

<!-- LDAP attribute used to retrieve the license option property of the user. No default value. -->

<LicenseOptionsAttr>actuatelicenseoptions
</LicenseOptionsAttr>

<!-- LDAP attribute used to retrieve the HomeFolder property of the user. No default value. -->

<HomeFolderAttr>actuateHomeFolder</HomeFolderAttr>

<!-- Permitted values are "included" or "linked". The default value is "linked". -->

<SendEmailAttr>actuateEmailWhen</SendEmailAttr>

<!-- Permitted values are "never", "always", "failures", or "successes". -->

<SendEmailDefault>never</SendEmailDefault>

<!-- LDAP attribute used to retrieve the notification preferences, SendNoticeForSuccess and SendNoticeForFailure properties of the user. -->

<SendNoticeAttr>actuateFolderWhen</SendNoticeAttr>

<!-- Permitted values are "never", "always", "failures", "successes". -->

<SendNoticeDefault>always</SendNoticeDefault>

<!-- LDAP attribute used to retrieve the SuccessNoticeExpiration property of the user. The default value causes BIRT iHub to delete notices according to volume settings.-->

<SuccessNoticeExpirationAttr>

actuateSuccessNoticeExpiration

</SuccessNoticeExpirationAttr>

<!-- Value to use for SuccessNoticeExpirationAttr when LDAP does not contain a value for that attribute. The value is the number of minutes. The default value of 0 (zero) causes BIRT iHub to delete notices according to volume settings. A value of -1 means that BIRT iHub keeps notices indefinitely. -->

<SuccessNoticeExpirationDefault>0
</SuccessNoticeExpirationDefault>

<!-- LDAP attribute used to retrieve the FailureNoticeExpiration property of the user. The default value causes BIRT iHub to delete notices according to volume settings. -->

<FailureNoticeExpirationAttr>actuateFailNoticeExpiration
</FailureNoticeExpirationAttr>

<!-- Value to use for FailureNoticeExpirationDefault when LDAP does not contain a value for that attribute. The value is the number of minutes. The default value of 0 (zero) causes BIRT iHub to delete notices according to volume settings. A value of -1 means that BIRT iHub keeps notices indefinitely. -->

<!-- LDAP attribute used to retrieve the privilege template for a user. Value is a comma-separated list of user or role privileges. A user permission is a user name followed by "=" and a string of 0 (zero) or more permission characters. A role permission is a role name followed by a "~" and a string of permission characters.

Permissible characters and their meanings are:

"r" = read

"w" = write

"e" = execute

"d" = delete

"v" = visible

"s" = secure read (page level read)

"g" = grant

Examples: bob=rwed, viewing only~rv -->

<PrivilegeTemplateAttr>actuateDefaultPriv

</PrivilegeTemplateAttr>

<!-- Value to use for PrivilegeTemplateAttr when LDAP does
not contain a value for that attribute. -->

<PrivilegeTemplateDefault/>

<!-- LDAP attribute used to retrieve the MaxJobPriority property of the user. The default value is 500. The permissible range is 0-1000. -->

<MaxJobPriorityAttr>actuateMaxPriority

</MaxJobPriorityAttr>

<!-- Value to use for MaxJobPriority when LDAP does not contain a value for that attribute. Default is 500. -->

<MaxJobPriorityDefault>500</MaxJobPriorityDefault>

<!-- LDAP attribute used to retrieve the ViewPreference property of the user. -->

<ViewPreferenceAttr>actuateViewingPref
</ViewPreferenceAttr>

<!-- Value to use for ViewPreferenceAttr when LDAP does not contain a value for that attribute. Permissible values are "default" and "dhtml".-->

<ChannelSubscriptionListAttr>actuateChannelList
</ChannelSubscriptionListAttr>

<ChannelSubscriptionListDefault/>

<ConnectionPropertyList>

<ConnectionProperty>

<Name>username</Name>

<Value>testUser</Value>

</ConnectionProperty>

<ConnectionProperty>

<Name>password</Name>

<Value>mypassword</Value>

</ConnectionProperty>

</ConnectionPropertyList>

<!-- LDAP attributes used when externalizing ConnectionPropertyList, containing username and password. Typically used when implementing pass-through security. Do not include the ConnectionPropertyList if not externalizing these properties. -->

<ConnectionPropertyList>

<ConnectionProperty>

<Name>username</Name>

<Value>testUser</Value>

</ConnectionProperty>

<ConnectionProperty>

<Name>password</Name>

<Value>mypassword</Value>

</ConnectionProperty>

</ConnectionPropertyList>

</Config>