mirror of
https://github.com/OPCFoundation/UA-.NETStandard.git
synced 2026-10-24 11:01:55 +08:00
172 lines
7.5 KiB
XML
172 lines
7.5 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<ApplicationConfiguration
|
|
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xmlns:ua="http://opcfoundation.org/UA/2008/02/Types.xsd"
|
|
xmlns="http://opcfoundation.org/UA/SDK/Configuration.xsd"
|
|
>
|
|
<ApplicationName>Quickstart UserAuthentication Server</ApplicationName>
|
|
<ApplicationUri>urn:localhost:UA:Quickstarts:UserAuthenticationServer</ApplicationUri>
|
|
<ProductUri>uri:opcfoundation.org:Quickstarts:UserAuthenticationServer</ProductUri>
|
|
<ApplicationType>Server_0</ApplicationType>
|
|
|
|
<SecurityConfiguration>
|
|
|
|
<!-- Where the application instance certificate is stored (MachineDefault) -->
|
|
<ApplicationCertificate>
|
|
<StoreType>Directory</StoreType>
|
|
<StorePath>%CommonApplicationData%\OPC Foundation\CertificateStores\MachineDefault</StorePath>
|
|
<SubjectName>CN=Quickstart UserAuthentication Server, C=US, S=Arizona, O=OPC Foundation, DC=localhost</SubjectName>
|
|
</ApplicationCertificate>
|
|
|
|
<!-- Where the trust list is stored (UA Applications) -->
|
|
<TrustedPeerCertificates>
|
|
<StoreType>Directory</StoreType>
|
|
<StorePath>%CommonApplicationData%\OPC Foundation\CertificateStores\UA Applications</StorePath>
|
|
</TrustedPeerCertificates>
|
|
|
|
<!-- Where the issuer certificate are stored (certificate authorities) -->
|
|
<TrustedIssuerCertificates>
|
|
<StoreType>Directory</StoreType>
|
|
<StorePath>%CommonApplicationData%\OPC Foundation\CertificateStores\UA Certificate Authorities</StorePath>
|
|
</TrustedIssuerCertificates>
|
|
|
|
<!-- The directory used to store invalid certficates for later review by the administrator. -->
|
|
<RejectedCertificateStore>
|
|
<StoreType>Directory</StoreType>
|
|
<StorePath>%CommonApplicationData%\OPC Foundation\CertificateStores\RejectedCertificates</StorePath>
|
|
</RejectedCertificateStore>
|
|
</SecurityConfiguration>
|
|
|
|
<TransportConfigurations></TransportConfigurations>
|
|
|
|
<TransportQuotas>
|
|
<OperationTimeout>600000</OperationTimeout>
|
|
<MaxStringLength>1048576</MaxStringLength>
|
|
<MaxByteStringLength>1048576</MaxByteStringLength>
|
|
<MaxArrayLength>65535</MaxArrayLength>
|
|
<MaxMessageSize>4194304</MaxMessageSize>
|
|
<MaxBufferSize>65535</MaxBufferSize>
|
|
<ChannelLifetime>300000</ChannelLifetime>
|
|
<SecurityTokenLifetime>3600000</SecurityTokenLifetime>
|
|
</TransportQuotas>
|
|
<ServerConfiguration>
|
|
<BaseAddresses>
|
|
<ua:String>https://localhost:62540/Quickstarts/UserAuthenticationServer</ua:String>
|
|
<ua:String>opc.tcp://localhost:62541/Quickstarts/UserAuthenticationServer</ua:String>
|
|
</BaseAddresses>
|
|
<SecurityPolicies>
|
|
<ServerSecurityPolicy>
|
|
<SecurityMode>None_1</SecurityMode>
|
|
<SecurityPolicyUri>http://opcfoundation.org/UA/SecurityPolicy#None</SecurityPolicyUri>
|
|
<SecurityLevel>0</SecurityLevel>
|
|
</ServerSecurityPolicy>
|
|
<ServerSecurityPolicy>
|
|
<SecurityMode>Sign_2</SecurityMode>
|
|
<SecurityPolicyUri>http://opcfoundation.org/UA/SecurityPolicy#Basic256Sha256</SecurityPolicyUri>
|
|
<SecurityLevel>1</SecurityLevel>
|
|
</ServerSecurityPolicy>
|
|
<ServerSecurityPolicy>
|
|
<SecurityMode>SignAndEncrypt_3</SecurityMode>
|
|
<SecurityPolicyUri>http://opcfoundation.org/UA/SecurityPolicy#Basic256Sha256</SecurityPolicyUri>
|
|
<SecurityLevel>5</SecurityLevel>
|
|
</ServerSecurityPolicy>
|
|
</SecurityPolicies>
|
|
<UserTokenPolicies>
|
|
<ua:UserTokenPolicy>
|
|
<ua:TokenType>Anonymous_0</ua:TokenType>
|
|
</ua:UserTokenPolicy>
|
|
<ua:UserTokenPolicy>
|
|
<ua:TokenType>UserName_1</ua:TokenType>
|
|
<ua:SecurityPolicyUri>http://opcfoundation.org/UA/SecurityPolicy#Basic128Rsa15</ua:SecurityPolicyUri>
|
|
</ua:UserTokenPolicy>
|
|
<ua:UserTokenPolicy>
|
|
<ua:TokenType>Certificate_2</ua:TokenType>
|
|
</ua:UserTokenPolicy>
|
|
|
|
<!--
|
|
The ServicePrincipalName (SPN) for the UA Server must be specified as the IssuerEndpointUrl
|
|
|
|
The ServicePrincipalName (SPN) must be registered with the Kerberos Ticket Granting Server (e.g. Windows Domain Controller).
|
|
The SPN identifies the host that UA server is running on and the name of the application.
|
|
A domain admin must grant delegate permission to the domain account that the UA server runs under.
|
|
That can be done with the setspn.exe utility:
|
|
|
|
setspn -U -S <hostname>/<exename> <domain accountname>
|
|
setspn -C -S <hostname>/<exename> <hostname>
|
|
|
|
The latter form is used if the UA server runs a Windows Service using the built in Windows Service account.
|
|
-->
|
|
<ua:UserTokenPolicy>
|
|
<ua:TokenType>IssuedToken_3</ua:TokenType>
|
|
<ua:IssuedTokenType>http://docs.oasis-open.org/wss/oasis-wss-kerberos-token-profile-1.1</ua:IssuedTokenType>
|
|
<ua:IssuerEndpointUrl>Aquamarine/Opc.Ua.UserAuthenticationServer</ua:IssuerEndpointUrl>
|
|
</ua:UserTokenPolicy>
|
|
|
|
</UserTokenPolicies>
|
|
<DiagnosticsEnabled>false</DiagnosticsEnabled>
|
|
<MaxSessionCount>100</MaxSessionCount>
|
|
<MinSessionTimeout>10000</MinSessionTimeout>
|
|
<MaxSessionTimeout>3600000</MaxSessionTimeout>
|
|
<MaxBrowseContinuationPoints>10</MaxBrowseContinuationPoints>
|
|
<MaxQueryContinuationPoints>10</MaxQueryContinuationPoints>
|
|
<MaxHistoryContinuationPoints>100</MaxHistoryContinuationPoints>
|
|
<MaxRequestAge>600000</MaxRequestAge>
|
|
<MinPublishingInterval>100</MinPublishingInterval>
|
|
<MaxPublishingInterval>3600000</MaxPublishingInterval>
|
|
<PublishingResolution>50</PublishingResolution>
|
|
<MaxSubscriptionLifetime>3600000</MaxSubscriptionLifetime>
|
|
<MaxMessageQueueSize>10</MaxMessageQueueSize>
|
|
<MaxNotificationQueueSize>100</MaxNotificationQueueSize>
|
|
<MaxNotificationsPerPublish>1000</MaxNotificationsPerPublish>
|
|
<MinMetadataSamplingInterval>1000</MinMetadataSamplingInterval>
|
|
<AvailableSamplingRates>
|
|
<SamplingRateGroup>
|
|
<Start>5</Start>
|
|
<Increment>5</Increment>
|
|
<Count>20</Count>
|
|
</SamplingRateGroup>
|
|
<SamplingRateGroup>
|
|
<Start>100</Start>
|
|
<Increment>100</Increment>
|
|
<Count>4</Count>
|
|
</SamplingRateGroup>
|
|
<SamplingRateGroup>
|
|
<Start>500</Start>
|
|
<Increment>250</Increment>
|
|
<Count>2</Count>
|
|
</SamplingRateGroup>
|
|
<SamplingRateGroup>
|
|
<Start>1000</Start>
|
|
<Increment>500</Increment>
|
|
<Count>20</Count>
|
|
</SamplingRateGroup>
|
|
</AvailableSamplingRates>
|
|
<MaxRegistrationInterval>30000</MaxRegistrationInterval>
|
|
<NodeManagerSaveFile>Quickstarts.UserAuthenticationServer.nodes.xml</NodeManagerSaveFile>
|
|
</ServerConfiguration>
|
|
|
|
<Extensions>
|
|
<ua:XmlElement>
|
|
<UserAuthenticationServerConfiguration xmlns="http://opcfoundation.org/Quickstarts/UserAuthentication">
|
|
</UserAuthenticationServerConfiguration>
|
|
</ua:XmlElement>
|
|
</Extensions>
|
|
|
|
<TraceConfiguration>
|
|
<OutputFilePath>Logs\Quickstarts.UserAuthenticationServer.log.txt</OutputFilePath>
|
|
<DeleteOnLoad>true</DeleteOnLoad>
|
|
<!-- Show Only Errors -->
|
|
<!-- <TraceMasks>1</TraceMasks> -->
|
|
<!-- Show Only Security and Errors -->
|
|
<!-- <TraceMasks>513</TraceMasks> -->
|
|
<!-- Show Only Security, Errors and Trace -->
|
|
<TraceMasks>515</TraceMasks>
|
|
<!-- Show Only Security, COM Calls, Errors and Trace -->
|
|
<!-- <TraceMasks>771</TraceMasks> -->
|
|
<!-- Show Only Security, Service Calls, Errors and Trace -->
|
|
<!-- <TraceMasks>523</TraceMasks> -->
|
|
<!-- Show Only Security, ServiceResultExceptions, Errors and Trace -->
|
|
<!-- <TraceMasks>519</TraceMasks> -->
|
|
</TraceConfiguration>
|
|
|
|
</ApplicationConfiguration> |