Configuring CAS-based SSO with ActiveVOS 8 on Apache … · ActiveVOS 8 on Apache Tomcat Technical...

30
Configuring CAS- based SSO with ActiveVOS 8 on Apache Tomcat Technical Note Version: 1.2 Dated: 25 February 2011 AN ACTIVE ENDPOINTS TECHNICAL NOTE © 2011 Active Endpoints Inc. ActiveVOS is a trademark of Active Endpoints, Inc. All other company and product names are the property of their respective owners. 2011

Transcript of Configuring CAS-based SSO with ActiveVOS 8 on Apache … · ActiveVOS 8 on Apache Tomcat Technical...

Configuring CAS-

based SSO with

ActiveVOS 8 on

Apache Tomcat

Technical Note

Version 12 Dated 25 February 2011

AN ACTIVE ENDPOINTS TECHNICAL NOTE

copy 2011 Active Endpoints Inc ActiveVOS is a trademark of Active Endpoints Inc All other company and product names are the property of their respective owners

2011

0

Copyright copy 2011 Active Endpoints Inc Page 2 of 30

Content Introduction 3 Overview of ActiveVOS 80 SSO Integration 3 ActiveVOS 80rsquos SSO Architecture 4 Jasig CAS SSO Provider 5 Configuring CAS for ActiveVOS Central 5

Detailed Steps 6 Testing 8

Configuring CAS for ActiveVOS Console 9 Detailed Steps 9 Testing 9

Troubleshooting 10 About Active Endpoints 11 Appendix A ndash ActiveVOS Centralrsquos webxml WAR File 12 Appendix B ndash ActiveVOS webxml 20

Copyright copy 2011 Active Endpoints Inc Page 3 of 30

Introduction This technical note describes how to configure ActiveVOS 80 running on

Apache Tomcat configured to use the Jasig CAS Single Sign-on (SSO)

provider

Overview of ActiveVOS 80 SSO Integration Business process applications need to integrate seamlessly within an

enterprisersquos application framework The ability to provide a single sign-on

user experience is important if the application is to gain quick acceptance

by its end users

ActiveVOS 80 introduces SSO capabilities to ActiveVOS Central

ActiveVOS Consoles and its services making it possible to integrate with

the SSO authentication and authorization framework in place such as

Jasigrsquos CAS Sunrsquos OpenSSO and the SSO frameworks built into

applications servers

The incorporation of SSO enables the ability to

Configure ActiveVOS Central and ActiveVOS Console to use the

same SSO environment used elsewhere within the enterprise

Integrate ActiveVOS Central forms embedded in a userrsquos web-

based application with SSO capabilities

Integrate ActiveVOS Central as an integrated part of a portal-

based application

ActiveVOS 80

Allows the separation of container authentication and the identification of the user for WS-HumanTask purposes

Provides support for secure trusted communication between ActiveVOS Central and ActiveVOS Server via SSLCertificate authentication

Integration of SSO providers only requires customization of the ActiveVOS Central application descriptors that is specific to the provider

The ActiveVOS server allows for requests to be proxied on behalf of a user without having access to the userrsquos private credentials

Copyright copy 2011 Active Endpoints Inc Page 4 of 30

provided that the request comes from a trusted source ndash ActiveVOS Central

ActiveVOS 80rsquos SSO Architecture The following picture depicts ActiveVOS 80rsquos SSO architecture

Shown here is a depiction of the interaction pattern of the Web browser

ActiveVOS Central ActiveVOS Server and the SSO service

Copyright copy 2011 Active Endpoints Inc Page 5 of 30

Jasig CAS SSO Provider The Jasig Central Authentication Service project more commonly

referred to as CAS is an authentication system originally created by Yale

University to provide a trusted way for an application to authenticate a

user CAS became a Jasig project in December 2004

The CAS is a single sign-on service that provides

An open and well-documented protocol

An open-source Java server component

A library of clients for Java Net PHP Perl Apache uPortal and others

Integrates with uPortal BlueSocket TikiWiki Mule Liferay Moodle and others

Community documentation and implementation support

An extensive community of adopters

To learn more about Jasig CAS please visit httpwwwjasigorgcas

Configuring CAS for ActiveVOS Central This section is a general overview of the installation and configuration

steps required to integrate a generic SSO provider with ActiveVOS The

next section will describe the specific steps for the Jasig CAS provider

Install and Configure SSO Server Component

Users should rely primarily on the documentation and support

resources provided by the SSO Vendor for coverage of the entire

possible configuration parameters Users should also consult

with their internal security team for recommendations

Customize ActiveVOS Central WAR to enable the SSO Client

SSO support in ActiveVOS Central is enabled via configuring

options in the aeWorkFlow-Configxml file contained in the

ActiveVOS Central WAR file Enable SSO by editing the

aeWorkFlow-Configxml file

Many providers will also require updating the webxml file to add

Servlet filters and additional configuration that is specific to the

SSO provider

Copyright copy 2011 Active Endpoints Inc Page 6 of 30

Configure SSL between ActiveVOS Central and the ActiveVOS Server

Configure a keystore containing a certificate with a private key

on each server

Import the certificates for the other servers into each servers

trust store

Configure the SSL connector for ActiveVOS Server to issue

challenges for Client Certificates

Assign certificate principals to the required roles (abTrust and

abTaskClient)

Updating the aeWorkFlow-Configxml file

Provide a URL for certificate requests to ActiveVOS Server by

specifying it in this location

lt-- WS-HT Task Client operations service URL --gt lt-- This endpoint must be secured with roles abTaskClient and abTrust--gt ltentry name=HtTaskClientServiceCertUrl value=httpshostportactivebpel-certservicesAeB4PTaskClient-taskOperations gt

Enable SSO Mode by enabling it in this location

lt-- Enable single sign-on mode (requires CAS or similar SSO

framework) --gt

ltentry name=SingleSignOnMode value=client-cert gt

ltentry name=SingleSignOnLogoutUrl

value=httpshostportcaslogout gt

Detailed Steps

Pre-Requisites

1 ActiveVOS Central and ActiveVOS Server 80 need to have been

installed on Apache Tomcat 6

2 Tomcat should be SSL-enabled (via its lsquoserverxmlrsquo file) The

certificates must be set up for the communication between the

ActiveVOS Central and ActiveVOS Server

3 CAS 3x must have been installed and configured for use with

Tomcat

4 Authentication must be set up with users with role abTaskClient

and abTrust For simplicity you can test using Tomcatrsquos tomcat-

Copyright copy 2011 Active Endpoints Inc Page 7 of 30

usersxml as the user identity store Later you may choose to use

an LDAPJDBC identity store

The user with the role abTrust is the trusted user identity used by

ActiveVOS Server and ActiveVOS Central to establish a trusted

connection This is the identity used in the certificate configured

for use between ActiveVOS Server and Central and as such the

correct name (as identified in the tomcat-usersxml file) or the

LDAP distinguished name must match the userrsquos name

Instructions

1 Stop the Tomcat Server Delete the

ltTomcat_Homegtwebappsactivevos-central directory

2 Make sure you have the activebpel-certwar in the

ltTomcat_Homegtwebapps directory If you do not see them

copy them from the

ActiveVOS_Server_Installation_Directoryserver-

enterprisetomcat_configwebapps folder to the

ltTomcat_Homegtwebapps folder

2 Make a copy of the existing activevos-centralwar in a location

completely outside of the Tomcat installation directories

3 Modify the webxml in activevos-centralwar and setup lsquoCASrsquo

filters by making the following updates

File location activevos-centralwar gt WEB-INF gt webxml

From the webxml found at Appendix A of this

document search for ldquolt-- BEGIN CAS --gt rdquo

Copy the snippet from lt-- BEGIN CAS --gt until lt-- END

CAS --gt and snap them in the exact location in your

webxml Please use ActiveVOS Designerrsquos XML editor for

this purpose and ensure that the XML file is well-formed

before saving it

Make sure you change the ltHOSTNAMEgt to the host

where you have the activevos server running

Copyright copy 2011 Active Endpoints Inc Page 8 of 30

Please note that the host name that you provide should

match with the ldquoCNrdquo (Common Name) of the keystore

that you generate

4 Modify the aeWorkFlow-Configxml file and make the following

updates

File location webappsactivevos-centralwarWEB-INF

aeWorkFlow-Configxml

Search for ldquoHtTaskClientServiceCertUrlrdquo If the entire

entry is commented out uncomment them and modify

the host as the host where the activevos server is

installed

Search for the text ldquoEnable single signonrdquo Just beneath

them yoursquoll find two entries ndash SingleSignOnMode and

SingleSignOnLogoutUrl Make sure these entries are not

commented out and modify the host name to the host

where the ActiveVOS Server is installed

5 Save these files and restart the ActiveVOS Server

6 Make sure the Identity Service is configured for lsquoAuthorizationrsquo in

the ActiveVOS Console ndash under ActiveVOS Console gt Admin gt

Identity Services Ideally it should be the same provider as used

the lsquoAuthenticationrsquo In this case it is tomcat-usersxml

Testing Assuming the certificates roles have been setup correctly when you try

to access the httphostserveractivevos-central you would be

redirected to Jasig CAS Login page Once logged in you should be able to

see the ActiveVOS Central main home page that lists the tasks for the

user logged in

Copyright copy 2011 Active Endpoints Inc Page 9 of 30

Configuring CAS for ActiveVOS Console

Detailed Steps 1 Stop the Tomcat Server Delete the

ltTomcat_Homegtwebappsactivevos directory

2 Make a copy of the existing activevoswar in a location

completely outside of the Tomcat installation directories

3 Modify the webxml in activevoswar and setup lsquoCASrsquo filters by

making the following updates

File location activevos gt WEB-INF gt webxml

From the webxml found at Appendix B of this document

search for ldquolt-- BEGIN CAS --gt rdquo

Copy the snippet from lt-- BEGIN CAS --gt until lt-- END

CAS --gt and snap them in the exact location in your

webxml Please use ActiveVOS Designerrsquos XML editor for

this purpose and ensure that the XML file is well-formed

before saving it

Make sure you change the ltHOSTNAMEgt to the host

where you have the activevos server running

4 Move the modified activevoswar to the webapps directory and

restart the ActiveVOS Server

Testing Assuming the certificates roles have been setup correctly when you try

to access the httphostserveractivevos you would be redirected to

Jasig CAS Login page Once logged in you should be able to see the

ActiveVOS Console main home page

Copyright copy 2011 Active Endpoints Inc Page 10 of 30

Troubleshooting

1 Sometimes the user may notice handshake exceptions It is a best

practice to add the following java property to the server startup so that

user may see more information about the handshake

-Djavaxnetdebug=sslhandshake

2 It is also good to add the following trust store and keystore system

properties which can point to the specific file This will help the server

pick the exact ones rather than choose the default store which may vary

from environment to environment jdk to jdk

-DjavaxnetssltrustStore

-DjavaxnetssltrustStorePassword

-DjavaxnetssltrustStoreType

-DjavaxnetsslkeyStore

-DjavaxnetsslkeyStorePassword

The above properties would avoid any kind of trust issues The above

properties are well-documented at

httpdownloadoraclecomjavase6docstechnotesguidessecurityjs

seJSSERefGuidehtmlTroubleshooting

Copyright copy 2011 Active Endpoints Inc Page 11 of 30

About Active Endpoints Active Endpoints (wwwactivevoscom) ActiveVOS is the leader in service-

oriented BPM software for process automation ActiveVOS empowers

project teams to create business process management (BPM)

applications using services making their businesses more agile and

effective ActiveVOS promotes mass adoption of SOA-enabled BPM

applications by focusing on accelerating project delivery time with a

complete affordable and easy-to-use system Active Endpoints is

headquartered in Waltham MA with development facilities in Shelton

CT

To find out how Active Endpoints can help your business visit

httpwwwactivevoscom call +1 781 547 2900 and press 1 for Sales or

email us at infoactivevoscom

Copyright copy 2011 Active Endpoints Inc Page 12 of 30

Appendix A ndash ActiveVOS Centralrsquos webxml WAR File

ltxml version=10 encoding=UTF-8gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance id=WebApp_ID version=24 xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsdgt ltdisplay-namegtWorkFlow Application Console(Active Endpoints Inc)ltdisplay-namegt lt-- Application Name that is display in the UI --gt ltcontext-paramgt ltparam-namegtaeworkflownameltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowinboxcontextpathltparam-namegt ltparam-valuegtinboxltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowavccontextpathltparam-namegt ltparam-valuegtavcltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowskiploginltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowconfigfilenameltparam-namegt ltparam-valuegtaeworkflow-configxmlltparam-valuegt ltcontext-paramgt lt-- String resource bundle --gt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegtorgactivebpelb4pwarwebAeTaskWarBundleltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegtWEB-INFaeworkflowltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NDetectionFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeI18NResourceFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NResourceFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeWorkFlowRequestFilterltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 13 of 30

ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443activevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 14 of 30

lt-- END CAS --gt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcavcjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcindexjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavctasklturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcformviewerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatelturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatepickerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjslayoutlturl-patterngt ltfilter-mappinggt ltlistenergt ltlistener-classgtorgactivebpelb4pwarwebservletAeWorkFlowContextListenerltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeWorkFlowAttachmentDownloadServletltservlet-classgt ltload-on-startupgt50ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet rendering task detail using xslltdisplay-namegt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt

Copyright copy 2011 Active Endpoints Inc Page 15 of 30

ltservlet-classgtorgactivebpelb4pwarxslAeWorkFlowRenderTaskXslServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc task renderings dispatch servlet --gt ltservletgt ltdisplay-namegtTask detail rendering dispatch servletltdisplay-namegt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeTaskRenderingDispatchServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc get form servlet --gt ltservletgt ltdisplay-namegtServlet that returns task or request form htmlltdisplay-namegt ltservlet-namegtAeGetFormServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet that returns form viewerltdisplay-namegt ltservlet-namegtAeGetFormViewerServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormViewerServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- task add attachment servlet --gt ltservletgt ltdisplay-namegtServlet responsible for adding task attachments from ajax formltdisplay-namegt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeAjaxAddTaskAttachmentServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- central proxy servlet --gt ltservletgt ltdisplay-namegtAjax Proxy Servletltdisplay-namegt ltservlet-namegtAjaxProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAjaxProxyServletltservlet-classgt ltservletgt lt-- central localization proxy servlet --gt ltservletgt ltdisplay-namegtCentral Localization Proxy Servletltdisplay-namegt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLocalizationProxyServletltservlet-classgt ltservletgt lt-- reports proxy servlet --gt ltservletgt ltdisplay-namegtReports Proxy Servletltdisplay-namegt ltservlet-namegtReportsProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyServletltservlet-classgt ltservletgt ltservletgt ltdisplay-namegtReports Proxy Cancel Servletltdisplay-namegt ltservlet-namegtReportsProxyCancelServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyCancelServletltservlet-classgt ltservletgt lt-- avc catalog proxy servlet --gt

Copyright copy 2011 Active Endpoints Inc Page 16 of 30

ltservletgt ltdisplay-namegtAVC Catalog Proxy Servletltdisplay-namegt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAvcCatalogProxyServletltservlet-classgt ltservletgt lt-- login checker servlet --gt ltservletgt ltdisplay-namegtLogin Session Check Servletltdisplay-namegt ltservlet-namegtAeLoginCheckServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLoginCheckServletltservlet-classgt ltservletgt lt-- inbox get task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtinboxgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- avc task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtavcgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- All GETs to task detail goes through the dispatcher --gt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtinboxtasklturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtavctasklturl-patterngt ltservlet-mappinggt lt-- Internal servlet that handles XSL rendering --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt lturl-patterngtinboxinternalAeWorkFlowRenderTaskXslServletlturl-patterngt ltservlet-mappinggt lt-- Servlet that returns the html for the task and request forms --gt ltservlet-mappinggt ltservlet-namegtAeGetFormServletltservlet-namegt lturl-patterngtavcformlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeGetFormViewerServletltservlet-namegt lturl-patterngtavcformviewerlturl-patterngt ltservlet-mappinggt lt-- central proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtavcproxylturl-patterngt ltservlet-mappinggt lt-- central localization proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt lturl-patterngti18nlturl-patterngt ltservlet-mappinggt lt-- unsecured proxy --gt

Copyright copy 2011 Active Endpoints Inc Page 17 of 30

ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtproxylturl-patterngt ltservlet-mappinggt lt-- catalog servlet proxy --gt ltservlet-mappinggt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt lturl-patterngtavccataloglturl-patterngt ltservlet-mappinggt lt-- reports proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtReportsProxyCancelServletltservlet-namegt lturl-patterngtavcCancelTaskjsplturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcbirtreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcextractlturl-patterngt ltservlet-mappinggt lt-- Add attachment --gt ltservlet-mappinggt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt lturl-patterngtavcaddTaskAttachmentlturl-patterngt ltservlet-mappinggt lt-- Login checker --gt ltservlet-mappinggt ltservlet-namegtAeLoginCheckServletltservlet-namegt lturl-patterngtloginchecklturl-patterngt ltservlet-mappinggt lt-- JSP_SERVLET_BEGIN ltservlet-mappinggt ltservlet-namegtjspltservlet-namegt lturl-patterngtjspflturl-patterngt ltservlet-mappinggt JSP_SERVLET_END --gt ltsession-configgt lt-- Default to 30 minute session timeouts --gt ltsession-timeoutgt30ltsession-timeoutgt ltsession-configgt lt-- MIME mapping --gt ltmime-mappinggt ltextensiongtcssltextensiongt ltmime-typegttextcssltmime-typegt ltmime-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 18 of 30

ltmime-mappinggt ltextensiongtdocltextensiongt ltmime-typegtapplicationvndms-wordltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtdspltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtgifltextensiongt ltmime-typegtimagegifltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjnlpltextensiongt ltmime-typegtapplicationx-java-jnlp-fileltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpegltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpgltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjsltextensiongt ltmime-typegtapplicationx-javascriptltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpdfltextensiongt ltmime-typegtapplicationpdfltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpngltextensiongt ltmime-typegtimagepngltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongttxtltextensiongt ltmime-typegttextplainltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxlsltextensiongt ltmime-typegtapplicationvndms-excelltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxmlltextensiongt ltmime-typegttextxmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxulltextensiongt ltmime-typegtapplicationvndmozillaxul-xmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzhtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzipltextensiongt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 2 of 30

Content Introduction 3 Overview of ActiveVOS 80 SSO Integration 3 ActiveVOS 80rsquos SSO Architecture 4 Jasig CAS SSO Provider 5 Configuring CAS for ActiveVOS Central 5

Detailed Steps 6 Testing 8

Configuring CAS for ActiveVOS Console 9 Detailed Steps 9 Testing 9

Troubleshooting 10 About Active Endpoints 11 Appendix A ndash ActiveVOS Centralrsquos webxml WAR File 12 Appendix B ndash ActiveVOS webxml 20

Copyright copy 2011 Active Endpoints Inc Page 3 of 30

Introduction This technical note describes how to configure ActiveVOS 80 running on

Apache Tomcat configured to use the Jasig CAS Single Sign-on (SSO)

provider

Overview of ActiveVOS 80 SSO Integration Business process applications need to integrate seamlessly within an

enterprisersquos application framework The ability to provide a single sign-on

user experience is important if the application is to gain quick acceptance

by its end users

ActiveVOS 80 introduces SSO capabilities to ActiveVOS Central

ActiveVOS Consoles and its services making it possible to integrate with

the SSO authentication and authorization framework in place such as

Jasigrsquos CAS Sunrsquos OpenSSO and the SSO frameworks built into

applications servers

The incorporation of SSO enables the ability to

Configure ActiveVOS Central and ActiveVOS Console to use the

same SSO environment used elsewhere within the enterprise

Integrate ActiveVOS Central forms embedded in a userrsquos web-

based application with SSO capabilities

Integrate ActiveVOS Central as an integrated part of a portal-

based application

ActiveVOS 80

Allows the separation of container authentication and the identification of the user for WS-HumanTask purposes

Provides support for secure trusted communication between ActiveVOS Central and ActiveVOS Server via SSLCertificate authentication

Integration of SSO providers only requires customization of the ActiveVOS Central application descriptors that is specific to the provider

The ActiveVOS server allows for requests to be proxied on behalf of a user without having access to the userrsquos private credentials

Copyright copy 2011 Active Endpoints Inc Page 4 of 30

provided that the request comes from a trusted source ndash ActiveVOS Central

ActiveVOS 80rsquos SSO Architecture The following picture depicts ActiveVOS 80rsquos SSO architecture

Shown here is a depiction of the interaction pattern of the Web browser

ActiveVOS Central ActiveVOS Server and the SSO service

Copyright copy 2011 Active Endpoints Inc Page 5 of 30

Jasig CAS SSO Provider The Jasig Central Authentication Service project more commonly

referred to as CAS is an authentication system originally created by Yale

University to provide a trusted way for an application to authenticate a

user CAS became a Jasig project in December 2004

The CAS is a single sign-on service that provides

An open and well-documented protocol

An open-source Java server component

A library of clients for Java Net PHP Perl Apache uPortal and others

Integrates with uPortal BlueSocket TikiWiki Mule Liferay Moodle and others

Community documentation and implementation support

An extensive community of adopters

To learn more about Jasig CAS please visit httpwwwjasigorgcas

Configuring CAS for ActiveVOS Central This section is a general overview of the installation and configuration

steps required to integrate a generic SSO provider with ActiveVOS The

next section will describe the specific steps for the Jasig CAS provider

Install and Configure SSO Server Component

Users should rely primarily on the documentation and support

resources provided by the SSO Vendor for coverage of the entire

possible configuration parameters Users should also consult

with their internal security team for recommendations

Customize ActiveVOS Central WAR to enable the SSO Client

SSO support in ActiveVOS Central is enabled via configuring

options in the aeWorkFlow-Configxml file contained in the

ActiveVOS Central WAR file Enable SSO by editing the

aeWorkFlow-Configxml file

Many providers will also require updating the webxml file to add

Servlet filters and additional configuration that is specific to the

SSO provider

Copyright copy 2011 Active Endpoints Inc Page 6 of 30

Configure SSL between ActiveVOS Central and the ActiveVOS Server

Configure a keystore containing a certificate with a private key

on each server

Import the certificates for the other servers into each servers

trust store

Configure the SSL connector for ActiveVOS Server to issue

challenges for Client Certificates

Assign certificate principals to the required roles (abTrust and

abTaskClient)

Updating the aeWorkFlow-Configxml file

Provide a URL for certificate requests to ActiveVOS Server by

specifying it in this location

lt-- WS-HT Task Client operations service URL --gt lt-- This endpoint must be secured with roles abTaskClient and abTrust--gt ltentry name=HtTaskClientServiceCertUrl value=httpshostportactivebpel-certservicesAeB4PTaskClient-taskOperations gt

Enable SSO Mode by enabling it in this location

lt-- Enable single sign-on mode (requires CAS or similar SSO

framework) --gt

ltentry name=SingleSignOnMode value=client-cert gt

ltentry name=SingleSignOnLogoutUrl

value=httpshostportcaslogout gt

Detailed Steps

Pre-Requisites

1 ActiveVOS Central and ActiveVOS Server 80 need to have been

installed on Apache Tomcat 6

2 Tomcat should be SSL-enabled (via its lsquoserverxmlrsquo file) The

certificates must be set up for the communication between the

ActiveVOS Central and ActiveVOS Server

3 CAS 3x must have been installed and configured for use with

Tomcat

4 Authentication must be set up with users with role abTaskClient

and abTrust For simplicity you can test using Tomcatrsquos tomcat-

Copyright copy 2011 Active Endpoints Inc Page 7 of 30

usersxml as the user identity store Later you may choose to use

an LDAPJDBC identity store

The user with the role abTrust is the trusted user identity used by

ActiveVOS Server and ActiveVOS Central to establish a trusted

connection This is the identity used in the certificate configured

for use between ActiveVOS Server and Central and as such the

correct name (as identified in the tomcat-usersxml file) or the

LDAP distinguished name must match the userrsquos name

Instructions

1 Stop the Tomcat Server Delete the

ltTomcat_Homegtwebappsactivevos-central directory

2 Make sure you have the activebpel-certwar in the

ltTomcat_Homegtwebapps directory If you do not see them

copy them from the

ActiveVOS_Server_Installation_Directoryserver-

enterprisetomcat_configwebapps folder to the

ltTomcat_Homegtwebapps folder

2 Make a copy of the existing activevos-centralwar in a location

completely outside of the Tomcat installation directories

3 Modify the webxml in activevos-centralwar and setup lsquoCASrsquo

filters by making the following updates

File location activevos-centralwar gt WEB-INF gt webxml

From the webxml found at Appendix A of this

document search for ldquolt-- BEGIN CAS --gt rdquo

Copy the snippet from lt-- BEGIN CAS --gt until lt-- END

CAS --gt and snap them in the exact location in your

webxml Please use ActiveVOS Designerrsquos XML editor for

this purpose and ensure that the XML file is well-formed

before saving it

Make sure you change the ltHOSTNAMEgt to the host

where you have the activevos server running

Copyright copy 2011 Active Endpoints Inc Page 8 of 30

Please note that the host name that you provide should

match with the ldquoCNrdquo (Common Name) of the keystore

that you generate

4 Modify the aeWorkFlow-Configxml file and make the following

updates

File location webappsactivevos-centralwarWEB-INF

aeWorkFlow-Configxml

Search for ldquoHtTaskClientServiceCertUrlrdquo If the entire

entry is commented out uncomment them and modify

the host as the host where the activevos server is

installed

Search for the text ldquoEnable single signonrdquo Just beneath

them yoursquoll find two entries ndash SingleSignOnMode and

SingleSignOnLogoutUrl Make sure these entries are not

commented out and modify the host name to the host

where the ActiveVOS Server is installed

5 Save these files and restart the ActiveVOS Server

6 Make sure the Identity Service is configured for lsquoAuthorizationrsquo in

the ActiveVOS Console ndash under ActiveVOS Console gt Admin gt

Identity Services Ideally it should be the same provider as used

the lsquoAuthenticationrsquo In this case it is tomcat-usersxml

Testing Assuming the certificates roles have been setup correctly when you try

to access the httphostserveractivevos-central you would be

redirected to Jasig CAS Login page Once logged in you should be able to

see the ActiveVOS Central main home page that lists the tasks for the

user logged in

Copyright copy 2011 Active Endpoints Inc Page 9 of 30

Configuring CAS for ActiveVOS Console

Detailed Steps 1 Stop the Tomcat Server Delete the

ltTomcat_Homegtwebappsactivevos directory

2 Make a copy of the existing activevoswar in a location

completely outside of the Tomcat installation directories

3 Modify the webxml in activevoswar and setup lsquoCASrsquo filters by

making the following updates

File location activevos gt WEB-INF gt webxml

From the webxml found at Appendix B of this document

search for ldquolt-- BEGIN CAS --gt rdquo

Copy the snippet from lt-- BEGIN CAS --gt until lt-- END

CAS --gt and snap them in the exact location in your

webxml Please use ActiveVOS Designerrsquos XML editor for

this purpose and ensure that the XML file is well-formed

before saving it

Make sure you change the ltHOSTNAMEgt to the host

where you have the activevos server running

4 Move the modified activevoswar to the webapps directory and

restart the ActiveVOS Server

Testing Assuming the certificates roles have been setup correctly when you try

to access the httphostserveractivevos you would be redirected to

Jasig CAS Login page Once logged in you should be able to see the

ActiveVOS Console main home page

Copyright copy 2011 Active Endpoints Inc Page 10 of 30

Troubleshooting

1 Sometimes the user may notice handshake exceptions It is a best

practice to add the following java property to the server startup so that

user may see more information about the handshake

-Djavaxnetdebug=sslhandshake

2 It is also good to add the following trust store and keystore system

properties which can point to the specific file This will help the server

pick the exact ones rather than choose the default store which may vary

from environment to environment jdk to jdk

-DjavaxnetssltrustStore

-DjavaxnetssltrustStorePassword

-DjavaxnetssltrustStoreType

-DjavaxnetsslkeyStore

-DjavaxnetsslkeyStorePassword

The above properties would avoid any kind of trust issues The above

properties are well-documented at

httpdownloadoraclecomjavase6docstechnotesguidessecurityjs

seJSSERefGuidehtmlTroubleshooting

Copyright copy 2011 Active Endpoints Inc Page 11 of 30

About Active Endpoints Active Endpoints (wwwactivevoscom) ActiveVOS is the leader in service-

oriented BPM software for process automation ActiveVOS empowers

project teams to create business process management (BPM)

applications using services making their businesses more agile and

effective ActiveVOS promotes mass adoption of SOA-enabled BPM

applications by focusing on accelerating project delivery time with a

complete affordable and easy-to-use system Active Endpoints is

headquartered in Waltham MA with development facilities in Shelton

CT

To find out how Active Endpoints can help your business visit

httpwwwactivevoscom call +1 781 547 2900 and press 1 for Sales or

email us at infoactivevoscom

Copyright copy 2011 Active Endpoints Inc Page 12 of 30

Appendix A ndash ActiveVOS Centralrsquos webxml WAR File

ltxml version=10 encoding=UTF-8gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance id=WebApp_ID version=24 xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsdgt ltdisplay-namegtWorkFlow Application Console(Active Endpoints Inc)ltdisplay-namegt lt-- Application Name that is display in the UI --gt ltcontext-paramgt ltparam-namegtaeworkflownameltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowinboxcontextpathltparam-namegt ltparam-valuegtinboxltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowavccontextpathltparam-namegt ltparam-valuegtavcltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowskiploginltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowconfigfilenameltparam-namegt ltparam-valuegtaeworkflow-configxmlltparam-valuegt ltcontext-paramgt lt-- String resource bundle --gt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegtorgactivebpelb4pwarwebAeTaskWarBundleltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegtWEB-INFaeworkflowltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NDetectionFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeI18NResourceFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NResourceFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeWorkFlowRequestFilterltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 13 of 30

ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443activevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 14 of 30

lt-- END CAS --gt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcavcjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcindexjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavctasklturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcformviewerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatelturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatepickerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjslayoutlturl-patterngt ltfilter-mappinggt ltlistenergt ltlistener-classgtorgactivebpelb4pwarwebservletAeWorkFlowContextListenerltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeWorkFlowAttachmentDownloadServletltservlet-classgt ltload-on-startupgt50ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet rendering task detail using xslltdisplay-namegt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt

Copyright copy 2011 Active Endpoints Inc Page 15 of 30

ltservlet-classgtorgactivebpelb4pwarxslAeWorkFlowRenderTaskXslServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc task renderings dispatch servlet --gt ltservletgt ltdisplay-namegtTask detail rendering dispatch servletltdisplay-namegt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeTaskRenderingDispatchServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc get form servlet --gt ltservletgt ltdisplay-namegtServlet that returns task or request form htmlltdisplay-namegt ltservlet-namegtAeGetFormServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet that returns form viewerltdisplay-namegt ltservlet-namegtAeGetFormViewerServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormViewerServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- task add attachment servlet --gt ltservletgt ltdisplay-namegtServlet responsible for adding task attachments from ajax formltdisplay-namegt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeAjaxAddTaskAttachmentServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- central proxy servlet --gt ltservletgt ltdisplay-namegtAjax Proxy Servletltdisplay-namegt ltservlet-namegtAjaxProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAjaxProxyServletltservlet-classgt ltservletgt lt-- central localization proxy servlet --gt ltservletgt ltdisplay-namegtCentral Localization Proxy Servletltdisplay-namegt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLocalizationProxyServletltservlet-classgt ltservletgt lt-- reports proxy servlet --gt ltservletgt ltdisplay-namegtReports Proxy Servletltdisplay-namegt ltservlet-namegtReportsProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyServletltservlet-classgt ltservletgt ltservletgt ltdisplay-namegtReports Proxy Cancel Servletltdisplay-namegt ltservlet-namegtReportsProxyCancelServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyCancelServletltservlet-classgt ltservletgt lt-- avc catalog proxy servlet --gt

Copyright copy 2011 Active Endpoints Inc Page 16 of 30

ltservletgt ltdisplay-namegtAVC Catalog Proxy Servletltdisplay-namegt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAvcCatalogProxyServletltservlet-classgt ltservletgt lt-- login checker servlet --gt ltservletgt ltdisplay-namegtLogin Session Check Servletltdisplay-namegt ltservlet-namegtAeLoginCheckServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLoginCheckServletltservlet-classgt ltservletgt lt-- inbox get task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtinboxgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- avc task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtavcgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- All GETs to task detail goes through the dispatcher --gt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtinboxtasklturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtavctasklturl-patterngt ltservlet-mappinggt lt-- Internal servlet that handles XSL rendering --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt lturl-patterngtinboxinternalAeWorkFlowRenderTaskXslServletlturl-patterngt ltservlet-mappinggt lt-- Servlet that returns the html for the task and request forms --gt ltservlet-mappinggt ltservlet-namegtAeGetFormServletltservlet-namegt lturl-patterngtavcformlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeGetFormViewerServletltservlet-namegt lturl-patterngtavcformviewerlturl-patterngt ltservlet-mappinggt lt-- central proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtavcproxylturl-patterngt ltservlet-mappinggt lt-- central localization proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt lturl-patterngti18nlturl-patterngt ltservlet-mappinggt lt-- unsecured proxy --gt

Copyright copy 2011 Active Endpoints Inc Page 17 of 30

ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtproxylturl-patterngt ltservlet-mappinggt lt-- catalog servlet proxy --gt ltservlet-mappinggt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt lturl-patterngtavccataloglturl-patterngt ltservlet-mappinggt lt-- reports proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtReportsProxyCancelServletltservlet-namegt lturl-patterngtavcCancelTaskjsplturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcbirtreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcextractlturl-patterngt ltservlet-mappinggt lt-- Add attachment --gt ltservlet-mappinggt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt lturl-patterngtavcaddTaskAttachmentlturl-patterngt ltservlet-mappinggt lt-- Login checker --gt ltservlet-mappinggt ltservlet-namegtAeLoginCheckServletltservlet-namegt lturl-patterngtloginchecklturl-patterngt ltservlet-mappinggt lt-- JSP_SERVLET_BEGIN ltservlet-mappinggt ltservlet-namegtjspltservlet-namegt lturl-patterngtjspflturl-patterngt ltservlet-mappinggt JSP_SERVLET_END --gt ltsession-configgt lt-- Default to 30 minute session timeouts --gt ltsession-timeoutgt30ltsession-timeoutgt ltsession-configgt lt-- MIME mapping --gt ltmime-mappinggt ltextensiongtcssltextensiongt ltmime-typegttextcssltmime-typegt ltmime-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 18 of 30

ltmime-mappinggt ltextensiongtdocltextensiongt ltmime-typegtapplicationvndms-wordltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtdspltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtgifltextensiongt ltmime-typegtimagegifltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjnlpltextensiongt ltmime-typegtapplicationx-java-jnlp-fileltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpegltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpgltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjsltextensiongt ltmime-typegtapplicationx-javascriptltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpdfltextensiongt ltmime-typegtapplicationpdfltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpngltextensiongt ltmime-typegtimagepngltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongttxtltextensiongt ltmime-typegttextplainltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxlsltextensiongt ltmime-typegtapplicationvndms-excelltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxmlltextensiongt ltmime-typegttextxmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxulltextensiongt ltmime-typegtapplicationvndmozillaxul-xmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzhtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzipltextensiongt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 3 of 30

Introduction This technical note describes how to configure ActiveVOS 80 running on

Apache Tomcat configured to use the Jasig CAS Single Sign-on (SSO)

provider

Overview of ActiveVOS 80 SSO Integration Business process applications need to integrate seamlessly within an

enterprisersquos application framework The ability to provide a single sign-on

user experience is important if the application is to gain quick acceptance

by its end users

ActiveVOS 80 introduces SSO capabilities to ActiveVOS Central

ActiveVOS Consoles and its services making it possible to integrate with

the SSO authentication and authorization framework in place such as

Jasigrsquos CAS Sunrsquos OpenSSO and the SSO frameworks built into

applications servers

The incorporation of SSO enables the ability to

Configure ActiveVOS Central and ActiveVOS Console to use the

same SSO environment used elsewhere within the enterprise

Integrate ActiveVOS Central forms embedded in a userrsquos web-

based application with SSO capabilities

Integrate ActiveVOS Central as an integrated part of a portal-

based application

ActiveVOS 80

Allows the separation of container authentication and the identification of the user for WS-HumanTask purposes

Provides support for secure trusted communication between ActiveVOS Central and ActiveVOS Server via SSLCertificate authentication

Integration of SSO providers only requires customization of the ActiveVOS Central application descriptors that is specific to the provider

The ActiveVOS server allows for requests to be proxied on behalf of a user without having access to the userrsquos private credentials

Copyright copy 2011 Active Endpoints Inc Page 4 of 30

provided that the request comes from a trusted source ndash ActiveVOS Central

ActiveVOS 80rsquos SSO Architecture The following picture depicts ActiveVOS 80rsquos SSO architecture

Shown here is a depiction of the interaction pattern of the Web browser

ActiveVOS Central ActiveVOS Server and the SSO service

Copyright copy 2011 Active Endpoints Inc Page 5 of 30

Jasig CAS SSO Provider The Jasig Central Authentication Service project more commonly

referred to as CAS is an authentication system originally created by Yale

University to provide a trusted way for an application to authenticate a

user CAS became a Jasig project in December 2004

The CAS is a single sign-on service that provides

An open and well-documented protocol

An open-source Java server component

A library of clients for Java Net PHP Perl Apache uPortal and others

Integrates with uPortal BlueSocket TikiWiki Mule Liferay Moodle and others

Community documentation and implementation support

An extensive community of adopters

To learn more about Jasig CAS please visit httpwwwjasigorgcas

Configuring CAS for ActiveVOS Central This section is a general overview of the installation and configuration

steps required to integrate a generic SSO provider with ActiveVOS The

next section will describe the specific steps for the Jasig CAS provider

Install and Configure SSO Server Component

Users should rely primarily on the documentation and support

resources provided by the SSO Vendor for coverage of the entire

possible configuration parameters Users should also consult

with their internal security team for recommendations

Customize ActiveVOS Central WAR to enable the SSO Client

SSO support in ActiveVOS Central is enabled via configuring

options in the aeWorkFlow-Configxml file contained in the

ActiveVOS Central WAR file Enable SSO by editing the

aeWorkFlow-Configxml file

Many providers will also require updating the webxml file to add

Servlet filters and additional configuration that is specific to the

SSO provider

Copyright copy 2011 Active Endpoints Inc Page 6 of 30

Configure SSL between ActiveVOS Central and the ActiveVOS Server

Configure a keystore containing a certificate with a private key

on each server

Import the certificates for the other servers into each servers

trust store

Configure the SSL connector for ActiveVOS Server to issue

challenges for Client Certificates

Assign certificate principals to the required roles (abTrust and

abTaskClient)

Updating the aeWorkFlow-Configxml file

Provide a URL for certificate requests to ActiveVOS Server by

specifying it in this location

lt-- WS-HT Task Client operations service URL --gt lt-- This endpoint must be secured with roles abTaskClient and abTrust--gt ltentry name=HtTaskClientServiceCertUrl value=httpshostportactivebpel-certservicesAeB4PTaskClient-taskOperations gt

Enable SSO Mode by enabling it in this location

lt-- Enable single sign-on mode (requires CAS or similar SSO

framework) --gt

ltentry name=SingleSignOnMode value=client-cert gt

ltentry name=SingleSignOnLogoutUrl

value=httpshostportcaslogout gt

Detailed Steps

Pre-Requisites

1 ActiveVOS Central and ActiveVOS Server 80 need to have been

installed on Apache Tomcat 6

2 Tomcat should be SSL-enabled (via its lsquoserverxmlrsquo file) The

certificates must be set up for the communication between the

ActiveVOS Central and ActiveVOS Server

3 CAS 3x must have been installed and configured for use with

Tomcat

4 Authentication must be set up with users with role abTaskClient

and abTrust For simplicity you can test using Tomcatrsquos tomcat-

Copyright copy 2011 Active Endpoints Inc Page 7 of 30

usersxml as the user identity store Later you may choose to use

an LDAPJDBC identity store

The user with the role abTrust is the trusted user identity used by

ActiveVOS Server and ActiveVOS Central to establish a trusted

connection This is the identity used in the certificate configured

for use between ActiveVOS Server and Central and as such the

correct name (as identified in the tomcat-usersxml file) or the

LDAP distinguished name must match the userrsquos name

Instructions

1 Stop the Tomcat Server Delete the

ltTomcat_Homegtwebappsactivevos-central directory

2 Make sure you have the activebpel-certwar in the

ltTomcat_Homegtwebapps directory If you do not see them

copy them from the

ActiveVOS_Server_Installation_Directoryserver-

enterprisetomcat_configwebapps folder to the

ltTomcat_Homegtwebapps folder

2 Make a copy of the existing activevos-centralwar in a location

completely outside of the Tomcat installation directories

3 Modify the webxml in activevos-centralwar and setup lsquoCASrsquo

filters by making the following updates

File location activevos-centralwar gt WEB-INF gt webxml

From the webxml found at Appendix A of this

document search for ldquolt-- BEGIN CAS --gt rdquo

Copy the snippet from lt-- BEGIN CAS --gt until lt-- END

CAS --gt and snap them in the exact location in your

webxml Please use ActiveVOS Designerrsquos XML editor for

this purpose and ensure that the XML file is well-formed

before saving it

Make sure you change the ltHOSTNAMEgt to the host

where you have the activevos server running

Copyright copy 2011 Active Endpoints Inc Page 8 of 30

Please note that the host name that you provide should

match with the ldquoCNrdquo (Common Name) of the keystore

that you generate

4 Modify the aeWorkFlow-Configxml file and make the following

updates

File location webappsactivevos-centralwarWEB-INF

aeWorkFlow-Configxml

Search for ldquoHtTaskClientServiceCertUrlrdquo If the entire

entry is commented out uncomment them and modify

the host as the host where the activevos server is

installed

Search for the text ldquoEnable single signonrdquo Just beneath

them yoursquoll find two entries ndash SingleSignOnMode and

SingleSignOnLogoutUrl Make sure these entries are not

commented out and modify the host name to the host

where the ActiveVOS Server is installed

5 Save these files and restart the ActiveVOS Server

6 Make sure the Identity Service is configured for lsquoAuthorizationrsquo in

the ActiveVOS Console ndash under ActiveVOS Console gt Admin gt

Identity Services Ideally it should be the same provider as used

the lsquoAuthenticationrsquo In this case it is tomcat-usersxml

Testing Assuming the certificates roles have been setup correctly when you try

to access the httphostserveractivevos-central you would be

redirected to Jasig CAS Login page Once logged in you should be able to

see the ActiveVOS Central main home page that lists the tasks for the

user logged in

Copyright copy 2011 Active Endpoints Inc Page 9 of 30

Configuring CAS for ActiveVOS Console

Detailed Steps 1 Stop the Tomcat Server Delete the

ltTomcat_Homegtwebappsactivevos directory

2 Make a copy of the existing activevoswar in a location

completely outside of the Tomcat installation directories

3 Modify the webxml in activevoswar and setup lsquoCASrsquo filters by

making the following updates

File location activevos gt WEB-INF gt webxml

From the webxml found at Appendix B of this document

search for ldquolt-- BEGIN CAS --gt rdquo

Copy the snippet from lt-- BEGIN CAS --gt until lt-- END

CAS --gt and snap them in the exact location in your

webxml Please use ActiveVOS Designerrsquos XML editor for

this purpose and ensure that the XML file is well-formed

before saving it

Make sure you change the ltHOSTNAMEgt to the host

where you have the activevos server running

4 Move the modified activevoswar to the webapps directory and

restart the ActiveVOS Server

Testing Assuming the certificates roles have been setup correctly when you try

to access the httphostserveractivevos you would be redirected to

Jasig CAS Login page Once logged in you should be able to see the

ActiveVOS Console main home page

Copyright copy 2011 Active Endpoints Inc Page 10 of 30

Troubleshooting

1 Sometimes the user may notice handshake exceptions It is a best

practice to add the following java property to the server startup so that

user may see more information about the handshake

-Djavaxnetdebug=sslhandshake

2 It is also good to add the following trust store and keystore system

properties which can point to the specific file This will help the server

pick the exact ones rather than choose the default store which may vary

from environment to environment jdk to jdk

-DjavaxnetssltrustStore

-DjavaxnetssltrustStorePassword

-DjavaxnetssltrustStoreType

-DjavaxnetsslkeyStore

-DjavaxnetsslkeyStorePassword

The above properties would avoid any kind of trust issues The above

properties are well-documented at

httpdownloadoraclecomjavase6docstechnotesguidessecurityjs

seJSSERefGuidehtmlTroubleshooting

Copyright copy 2011 Active Endpoints Inc Page 11 of 30

About Active Endpoints Active Endpoints (wwwactivevoscom) ActiveVOS is the leader in service-

oriented BPM software for process automation ActiveVOS empowers

project teams to create business process management (BPM)

applications using services making their businesses more agile and

effective ActiveVOS promotes mass adoption of SOA-enabled BPM

applications by focusing on accelerating project delivery time with a

complete affordable and easy-to-use system Active Endpoints is

headquartered in Waltham MA with development facilities in Shelton

CT

To find out how Active Endpoints can help your business visit

httpwwwactivevoscom call +1 781 547 2900 and press 1 for Sales or

email us at infoactivevoscom

Copyright copy 2011 Active Endpoints Inc Page 12 of 30

Appendix A ndash ActiveVOS Centralrsquos webxml WAR File

ltxml version=10 encoding=UTF-8gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance id=WebApp_ID version=24 xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsdgt ltdisplay-namegtWorkFlow Application Console(Active Endpoints Inc)ltdisplay-namegt lt-- Application Name that is display in the UI --gt ltcontext-paramgt ltparam-namegtaeworkflownameltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowinboxcontextpathltparam-namegt ltparam-valuegtinboxltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowavccontextpathltparam-namegt ltparam-valuegtavcltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowskiploginltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowconfigfilenameltparam-namegt ltparam-valuegtaeworkflow-configxmlltparam-valuegt ltcontext-paramgt lt-- String resource bundle --gt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegtorgactivebpelb4pwarwebAeTaskWarBundleltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegtWEB-INFaeworkflowltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NDetectionFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeI18NResourceFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NResourceFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeWorkFlowRequestFilterltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 13 of 30

ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443activevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 14 of 30

lt-- END CAS --gt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcavcjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcindexjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavctasklturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcformviewerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatelturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatepickerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjslayoutlturl-patterngt ltfilter-mappinggt ltlistenergt ltlistener-classgtorgactivebpelb4pwarwebservletAeWorkFlowContextListenerltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeWorkFlowAttachmentDownloadServletltservlet-classgt ltload-on-startupgt50ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet rendering task detail using xslltdisplay-namegt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt

Copyright copy 2011 Active Endpoints Inc Page 15 of 30

ltservlet-classgtorgactivebpelb4pwarxslAeWorkFlowRenderTaskXslServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc task renderings dispatch servlet --gt ltservletgt ltdisplay-namegtTask detail rendering dispatch servletltdisplay-namegt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeTaskRenderingDispatchServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc get form servlet --gt ltservletgt ltdisplay-namegtServlet that returns task or request form htmlltdisplay-namegt ltservlet-namegtAeGetFormServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet that returns form viewerltdisplay-namegt ltservlet-namegtAeGetFormViewerServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormViewerServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- task add attachment servlet --gt ltservletgt ltdisplay-namegtServlet responsible for adding task attachments from ajax formltdisplay-namegt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeAjaxAddTaskAttachmentServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- central proxy servlet --gt ltservletgt ltdisplay-namegtAjax Proxy Servletltdisplay-namegt ltservlet-namegtAjaxProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAjaxProxyServletltservlet-classgt ltservletgt lt-- central localization proxy servlet --gt ltservletgt ltdisplay-namegtCentral Localization Proxy Servletltdisplay-namegt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLocalizationProxyServletltservlet-classgt ltservletgt lt-- reports proxy servlet --gt ltservletgt ltdisplay-namegtReports Proxy Servletltdisplay-namegt ltservlet-namegtReportsProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyServletltservlet-classgt ltservletgt ltservletgt ltdisplay-namegtReports Proxy Cancel Servletltdisplay-namegt ltservlet-namegtReportsProxyCancelServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyCancelServletltservlet-classgt ltservletgt lt-- avc catalog proxy servlet --gt

Copyright copy 2011 Active Endpoints Inc Page 16 of 30

ltservletgt ltdisplay-namegtAVC Catalog Proxy Servletltdisplay-namegt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAvcCatalogProxyServletltservlet-classgt ltservletgt lt-- login checker servlet --gt ltservletgt ltdisplay-namegtLogin Session Check Servletltdisplay-namegt ltservlet-namegtAeLoginCheckServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLoginCheckServletltservlet-classgt ltservletgt lt-- inbox get task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtinboxgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- avc task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtavcgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- All GETs to task detail goes through the dispatcher --gt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtinboxtasklturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtavctasklturl-patterngt ltservlet-mappinggt lt-- Internal servlet that handles XSL rendering --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt lturl-patterngtinboxinternalAeWorkFlowRenderTaskXslServletlturl-patterngt ltservlet-mappinggt lt-- Servlet that returns the html for the task and request forms --gt ltservlet-mappinggt ltservlet-namegtAeGetFormServletltservlet-namegt lturl-patterngtavcformlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeGetFormViewerServletltservlet-namegt lturl-patterngtavcformviewerlturl-patterngt ltservlet-mappinggt lt-- central proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtavcproxylturl-patterngt ltservlet-mappinggt lt-- central localization proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt lturl-patterngti18nlturl-patterngt ltservlet-mappinggt lt-- unsecured proxy --gt

Copyright copy 2011 Active Endpoints Inc Page 17 of 30

ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtproxylturl-patterngt ltservlet-mappinggt lt-- catalog servlet proxy --gt ltservlet-mappinggt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt lturl-patterngtavccataloglturl-patterngt ltservlet-mappinggt lt-- reports proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtReportsProxyCancelServletltservlet-namegt lturl-patterngtavcCancelTaskjsplturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcbirtreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcextractlturl-patterngt ltservlet-mappinggt lt-- Add attachment --gt ltservlet-mappinggt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt lturl-patterngtavcaddTaskAttachmentlturl-patterngt ltservlet-mappinggt lt-- Login checker --gt ltservlet-mappinggt ltservlet-namegtAeLoginCheckServletltservlet-namegt lturl-patterngtloginchecklturl-patterngt ltservlet-mappinggt lt-- JSP_SERVLET_BEGIN ltservlet-mappinggt ltservlet-namegtjspltservlet-namegt lturl-patterngtjspflturl-patterngt ltservlet-mappinggt JSP_SERVLET_END --gt ltsession-configgt lt-- Default to 30 minute session timeouts --gt ltsession-timeoutgt30ltsession-timeoutgt ltsession-configgt lt-- MIME mapping --gt ltmime-mappinggt ltextensiongtcssltextensiongt ltmime-typegttextcssltmime-typegt ltmime-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 18 of 30

ltmime-mappinggt ltextensiongtdocltextensiongt ltmime-typegtapplicationvndms-wordltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtdspltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtgifltextensiongt ltmime-typegtimagegifltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjnlpltextensiongt ltmime-typegtapplicationx-java-jnlp-fileltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpegltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpgltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjsltextensiongt ltmime-typegtapplicationx-javascriptltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpdfltextensiongt ltmime-typegtapplicationpdfltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpngltextensiongt ltmime-typegtimagepngltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongttxtltextensiongt ltmime-typegttextplainltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxlsltextensiongt ltmime-typegtapplicationvndms-excelltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxmlltextensiongt ltmime-typegttextxmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxulltextensiongt ltmime-typegtapplicationvndmozillaxul-xmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzhtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzipltextensiongt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 4 of 30

provided that the request comes from a trusted source ndash ActiveVOS Central

ActiveVOS 80rsquos SSO Architecture The following picture depicts ActiveVOS 80rsquos SSO architecture

Shown here is a depiction of the interaction pattern of the Web browser

ActiveVOS Central ActiveVOS Server and the SSO service

Copyright copy 2011 Active Endpoints Inc Page 5 of 30

Jasig CAS SSO Provider The Jasig Central Authentication Service project more commonly

referred to as CAS is an authentication system originally created by Yale

University to provide a trusted way for an application to authenticate a

user CAS became a Jasig project in December 2004

The CAS is a single sign-on service that provides

An open and well-documented protocol

An open-source Java server component

A library of clients for Java Net PHP Perl Apache uPortal and others

Integrates with uPortal BlueSocket TikiWiki Mule Liferay Moodle and others

Community documentation and implementation support

An extensive community of adopters

To learn more about Jasig CAS please visit httpwwwjasigorgcas

Configuring CAS for ActiveVOS Central This section is a general overview of the installation and configuration

steps required to integrate a generic SSO provider with ActiveVOS The

next section will describe the specific steps for the Jasig CAS provider

Install and Configure SSO Server Component

Users should rely primarily on the documentation and support

resources provided by the SSO Vendor for coverage of the entire

possible configuration parameters Users should also consult

with their internal security team for recommendations

Customize ActiveVOS Central WAR to enable the SSO Client

SSO support in ActiveVOS Central is enabled via configuring

options in the aeWorkFlow-Configxml file contained in the

ActiveVOS Central WAR file Enable SSO by editing the

aeWorkFlow-Configxml file

Many providers will also require updating the webxml file to add

Servlet filters and additional configuration that is specific to the

SSO provider

Copyright copy 2011 Active Endpoints Inc Page 6 of 30

Configure SSL between ActiveVOS Central and the ActiveVOS Server

Configure a keystore containing a certificate with a private key

on each server

Import the certificates for the other servers into each servers

trust store

Configure the SSL connector for ActiveVOS Server to issue

challenges for Client Certificates

Assign certificate principals to the required roles (abTrust and

abTaskClient)

Updating the aeWorkFlow-Configxml file

Provide a URL for certificate requests to ActiveVOS Server by

specifying it in this location

lt-- WS-HT Task Client operations service URL --gt lt-- This endpoint must be secured with roles abTaskClient and abTrust--gt ltentry name=HtTaskClientServiceCertUrl value=httpshostportactivebpel-certservicesAeB4PTaskClient-taskOperations gt

Enable SSO Mode by enabling it in this location

lt-- Enable single sign-on mode (requires CAS or similar SSO

framework) --gt

ltentry name=SingleSignOnMode value=client-cert gt

ltentry name=SingleSignOnLogoutUrl

value=httpshostportcaslogout gt

Detailed Steps

Pre-Requisites

1 ActiveVOS Central and ActiveVOS Server 80 need to have been

installed on Apache Tomcat 6

2 Tomcat should be SSL-enabled (via its lsquoserverxmlrsquo file) The

certificates must be set up for the communication between the

ActiveVOS Central and ActiveVOS Server

3 CAS 3x must have been installed and configured for use with

Tomcat

4 Authentication must be set up with users with role abTaskClient

and abTrust For simplicity you can test using Tomcatrsquos tomcat-

Copyright copy 2011 Active Endpoints Inc Page 7 of 30

usersxml as the user identity store Later you may choose to use

an LDAPJDBC identity store

The user with the role abTrust is the trusted user identity used by

ActiveVOS Server and ActiveVOS Central to establish a trusted

connection This is the identity used in the certificate configured

for use between ActiveVOS Server and Central and as such the

correct name (as identified in the tomcat-usersxml file) or the

LDAP distinguished name must match the userrsquos name

Instructions

1 Stop the Tomcat Server Delete the

ltTomcat_Homegtwebappsactivevos-central directory

2 Make sure you have the activebpel-certwar in the

ltTomcat_Homegtwebapps directory If you do not see them

copy them from the

ActiveVOS_Server_Installation_Directoryserver-

enterprisetomcat_configwebapps folder to the

ltTomcat_Homegtwebapps folder

2 Make a copy of the existing activevos-centralwar in a location

completely outside of the Tomcat installation directories

3 Modify the webxml in activevos-centralwar and setup lsquoCASrsquo

filters by making the following updates

File location activevos-centralwar gt WEB-INF gt webxml

From the webxml found at Appendix A of this

document search for ldquolt-- BEGIN CAS --gt rdquo

Copy the snippet from lt-- BEGIN CAS --gt until lt-- END

CAS --gt and snap them in the exact location in your

webxml Please use ActiveVOS Designerrsquos XML editor for

this purpose and ensure that the XML file is well-formed

before saving it

Make sure you change the ltHOSTNAMEgt to the host

where you have the activevos server running

Copyright copy 2011 Active Endpoints Inc Page 8 of 30

Please note that the host name that you provide should

match with the ldquoCNrdquo (Common Name) of the keystore

that you generate

4 Modify the aeWorkFlow-Configxml file and make the following

updates

File location webappsactivevos-centralwarWEB-INF

aeWorkFlow-Configxml

Search for ldquoHtTaskClientServiceCertUrlrdquo If the entire

entry is commented out uncomment them and modify

the host as the host where the activevos server is

installed

Search for the text ldquoEnable single signonrdquo Just beneath

them yoursquoll find two entries ndash SingleSignOnMode and

SingleSignOnLogoutUrl Make sure these entries are not

commented out and modify the host name to the host

where the ActiveVOS Server is installed

5 Save these files and restart the ActiveVOS Server

6 Make sure the Identity Service is configured for lsquoAuthorizationrsquo in

the ActiveVOS Console ndash under ActiveVOS Console gt Admin gt

Identity Services Ideally it should be the same provider as used

the lsquoAuthenticationrsquo In this case it is tomcat-usersxml

Testing Assuming the certificates roles have been setup correctly when you try

to access the httphostserveractivevos-central you would be

redirected to Jasig CAS Login page Once logged in you should be able to

see the ActiveVOS Central main home page that lists the tasks for the

user logged in

Copyright copy 2011 Active Endpoints Inc Page 9 of 30

Configuring CAS for ActiveVOS Console

Detailed Steps 1 Stop the Tomcat Server Delete the

ltTomcat_Homegtwebappsactivevos directory

2 Make a copy of the existing activevoswar in a location

completely outside of the Tomcat installation directories

3 Modify the webxml in activevoswar and setup lsquoCASrsquo filters by

making the following updates

File location activevos gt WEB-INF gt webxml

From the webxml found at Appendix B of this document

search for ldquolt-- BEGIN CAS --gt rdquo

Copy the snippet from lt-- BEGIN CAS --gt until lt-- END

CAS --gt and snap them in the exact location in your

webxml Please use ActiveVOS Designerrsquos XML editor for

this purpose and ensure that the XML file is well-formed

before saving it

Make sure you change the ltHOSTNAMEgt to the host

where you have the activevos server running

4 Move the modified activevoswar to the webapps directory and

restart the ActiveVOS Server

Testing Assuming the certificates roles have been setup correctly when you try

to access the httphostserveractivevos you would be redirected to

Jasig CAS Login page Once logged in you should be able to see the

ActiveVOS Console main home page

Copyright copy 2011 Active Endpoints Inc Page 10 of 30

Troubleshooting

1 Sometimes the user may notice handshake exceptions It is a best

practice to add the following java property to the server startup so that

user may see more information about the handshake

-Djavaxnetdebug=sslhandshake

2 It is also good to add the following trust store and keystore system

properties which can point to the specific file This will help the server

pick the exact ones rather than choose the default store which may vary

from environment to environment jdk to jdk

-DjavaxnetssltrustStore

-DjavaxnetssltrustStorePassword

-DjavaxnetssltrustStoreType

-DjavaxnetsslkeyStore

-DjavaxnetsslkeyStorePassword

The above properties would avoid any kind of trust issues The above

properties are well-documented at

httpdownloadoraclecomjavase6docstechnotesguidessecurityjs

seJSSERefGuidehtmlTroubleshooting

Copyright copy 2011 Active Endpoints Inc Page 11 of 30

About Active Endpoints Active Endpoints (wwwactivevoscom) ActiveVOS is the leader in service-

oriented BPM software for process automation ActiveVOS empowers

project teams to create business process management (BPM)

applications using services making their businesses more agile and

effective ActiveVOS promotes mass adoption of SOA-enabled BPM

applications by focusing on accelerating project delivery time with a

complete affordable and easy-to-use system Active Endpoints is

headquartered in Waltham MA with development facilities in Shelton

CT

To find out how Active Endpoints can help your business visit

httpwwwactivevoscom call +1 781 547 2900 and press 1 for Sales or

email us at infoactivevoscom

Copyright copy 2011 Active Endpoints Inc Page 12 of 30

Appendix A ndash ActiveVOS Centralrsquos webxml WAR File

ltxml version=10 encoding=UTF-8gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance id=WebApp_ID version=24 xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsdgt ltdisplay-namegtWorkFlow Application Console(Active Endpoints Inc)ltdisplay-namegt lt-- Application Name that is display in the UI --gt ltcontext-paramgt ltparam-namegtaeworkflownameltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowinboxcontextpathltparam-namegt ltparam-valuegtinboxltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowavccontextpathltparam-namegt ltparam-valuegtavcltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowskiploginltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowconfigfilenameltparam-namegt ltparam-valuegtaeworkflow-configxmlltparam-valuegt ltcontext-paramgt lt-- String resource bundle --gt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegtorgactivebpelb4pwarwebAeTaskWarBundleltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegtWEB-INFaeworkflowltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NDetectionFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeI18NResourceFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NResourceFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeWorkFlowRequestFilterltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 13 of 30

ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443activevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 14 of 30

lt-- END CAS --gt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcavcjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcindexjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavctasklturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcformviewerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatelturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatepickerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjslayoutlturl-patterngt ltfilter-mappinggt ltlistenergt ltlistener-classgtorgactivebpelb4pwarwebservletAeWorkFlowContextListenerltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeWorkFlowAttachmentDownloadServletltservlet-classgt ltload-on-startupgt50ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet rendering task detail using xslltdisplay-namegt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt

Copyright copy 2011 Active Endpoints Inc Page 15 of 30

ltservlet-classgtorgactivebpelb4pwarxslAeWorkFlowRenderTaskXslServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc task renderings dispatch servlet --gt ltservletgt ltdisplay-namegtTask detail rendering dispatch servletltdisplay-namegt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeTaskRenderingDispatchServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc get form servlet --gt ltservletgt ltdisplay-namegtServlet that returns task or request form htmlltdisplay-namegt ltservlet-namegtAeGetFormServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet that returns form viewerltdisplay-namegt ltservlet-namegtAeGetFormViewerServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormViewerServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- task add attachment servlet --gt ltservletgt ltdisplay-namegtServlet responsible for adding task attachments from ajax formltdisplay-namegt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeAjaxAddTaskAttachmentServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- central proxy servlet --gt ltservletgt ltdisplay-namegtAjax Proxy Servletltdisplay-namegt ltservlet-namegtAjaxProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAjaxProxyServletltservlet-classgt ltservletgt lt-- central localization proxy servlet --gt ltservletgt ltdisplay-namegtCentral Localization Proxy Servletltdisplay-namegt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLocalizationProxyServletltservlet-classgt ltservletgt lt-- reports proxy servlet --gt ltservletgt ltdisplay-namegtReports Proxy Servletltdisplay-namegt ltservlet-namegtReportsProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyServletltservlet-classgt ltservletgt ltservletgt ltdisplay-namegtReports Proxy Cancel Servletltdisplay-namegt ltservlet-namegtReportsProxyCancelServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyCancelServletltservlet-classgt ltservletgt lt-- avc catalog proxy servlet --gt

Copyright copy 2011 Active Endpoints Inc Page 16 of 30

ltservletgt ltdisplay-namegtAVC Catalog Proxy Servletltdisplay-namegt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAvcCatalogProxyServletltservlet-classgt ltservletgt lt-- login checker servlet --gt ltservletgt ltdisplay-namegtLogin Session Check Servletltdisplay-namegt ltservlet-namegtAeLoginCheckServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLoginCheckServletltservlet-classgt ltservletgt lt-- inbox get task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtinboxgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- avc task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtavcgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- All GETs to task detail goes through the dispatcher --gt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtinboxtasklturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtavctasklturl-patterngt ltservlet-mappinggt lt-- Internal servlet that handles XSL rendering --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt lturl-patterngtinboxinternalAeWorkFlowRenderTaskXslServletlturl-patterngt ltservlet-mappinggt lt-- Servlet that returns the html for the task and request forms --gt ltservlet-mappinggt ltservlet-namegtAeGetFormServletltservlet-namegt lturl-patterngtavcformlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeGetFormViewerServletltservlet-namegt lturl-patterngtavcformviewerlturl-patterngt ltservlet-mappinggt lt-- central proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtavcproxylturl-patterngt ltservlet-mappinggt lt-- central localization proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt lturl-patterngti18nlturl-patterngt ltservlet-mappinggt lt-- unsecured proxy --gt

Copyright copy 2011 Active Endpoints Inc Page 17 of 30

ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtproxylturl-patterngt ltservlet-mappinggt lt-- catalog servlet proxy --gt ltservlet-mappinggt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt lturl-patterngtavccataloglturl-patterngt ltservlet-mappinggt lt-- reports proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtReportsProxyCancelServletltservlet-namegt lturl-patterngtavcCancelTaskjsplturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcbirtreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcextractlturl-patterngt ltservlet-mappinggt lt-- Add attachment --gt ltservlet-mappinggt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt lturl-patterngtavcaddTaskAttachmentlturl-patterngt ltservlet-mappinggt lt-- Login checker --gt ltservlet-mappinggt ltservlet-namegtAeLoginCheckServletltservlet-namegt lturl-patterngtloginchecklturl-patterngt ltservlet-mappinggt lt-- JSP_SERVLET_BEGIN ltservlet-mappinggt ltservlet-namegtjspltservlet-namegt lturl-patterngtjspflturl-patterngt ltservlet-mappinggt JSP_SERVLET_END --gt ltsession-configgt lt-- Default to 30 minute session timeouts --gt ltsession-timeoutgt30ltsession-timeoutgt ltsession-configgt lt-- MIME mapping --gt ltmime-mappinggt ltextensiongtcssltextensiongt ltmime-typegttextcssltmime-typegt ltmime-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 18 of 30

ltmime-mappinggt ltextensiongtdocltextensiongt ltmime-typegtapplicationvndms-wordltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtdspltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtgifltextensiongt ltmime-typegtimagegifltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjnlpltextensiongt ltmime-typegtapplicationx-java-jnlp-fileltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpegltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpgltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjsltextensiongt ltmime-typegtapplicationx-javascriptltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpdfltextensiongt ltmime-typegtapplicationpdfltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpngltextensiongt ltmime-typegtimagepngltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongttxtltextensiongt ltmime-typegttextplainltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxlsltextensiongt ltmime-typegtapplicationvndms-excelltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxmlltextensiongt ltmime-typegttextxmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxulltextensiongt ltmime-typegtapplicationvndmozillaxul-xmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzhtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzipltextensiongt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 5 of 30

Jasig CAS SSO Provider The Jasig Central Authentication Service project more commonly

referred to as CAS is an authentication system originally created by Yale

University to provide a trusted way for an application to authenticate a

user CAS became a Jasig project in December 2004

The CAS is a single sign-on service that provides

An open and well-documented protocol

An open-source Java server component

A library of clients for Java Net PHP Perl Apache uPortal and others

Integrates with uPortal BlueSocket TikiWiki Mule Liferay Moodle and others

Community documentation and implementation support

An extensive community of adopters

To learn more about Jasig CAS please visit httpwwwjasigorgcas

Configuring CAS for ActiveVOS Central This section is a general overview of the installation and configuration

steps required to integrate a generic SSO provider with ActiveVOS The

next section will describe the specific steps for the Jasig CAS provider

Install and Configure SSO Server Component

Users should rely primarily on the documentation and support

resources provided by the SSO Vendor for coverage of the entire

possible configuration parameters Users should also consult

with their internal security team for recommendations

Customize ActiveVOS Central WAR to enable the SSO Client

SSO support in ActiveVOS Central is enabled via configuring

options in the aeWorkFlow-Configxml file contained in the

ActiveVOS Central WAR file Enable SSO by editing the

aeWorkFlow-Configxml file

Many providers will also require updating the webxml file to add

Servlet filters and additional configuration that is specific to the

SSO provider

Copyright copy 2011 Active Endpoints Inc Page 6 of 30

Configure SSL between ActiveVOS Central and the ActiveVOS Server

Configure a keystore containing a certificate with a private key

on each server

Import the certificates for the other servers into each servers

trust store

Configure the SSL connector for ActiveVOS Server to issue

challenges for Client Certificates

Assign certificate principals to the required roles (abTrust and

abTaskClient)

Updating the aeWorkFlow-Configxml file

Provide a URL for certificate requests to ActiveVOS Server by

specifying it in this location

lt-- WS-HT Task Client operations service URL --gt lt-- This endpoint must be secured with roles abTaskClient and abTrust--gt ltentry name=HtTaskClientServiceCertUrl value=httpshostportactivebpel-certservicesAeB4PTaskClient-taskOperations gt

Enable SSO Mode by enabling it in this location

lt-- Enable single sign-on mode (requires CAS or similar SSO

framework) --gt

ltentry name=SingleSignOnMode value=client-cert gt

ltentry name=SingleSignOnLogoutUrl

value=httpshostportcaslogout gt

Detailed Steps

Pre-Requisites

1 ActiveVOS Central and ActiveVOS Server 80 need to have been

installed on Apache Tomcat 6

2 Tomcat should be SSL-enabled (via its lsquoserverxmlrsquo file) The

certificates must be set up for the communication between the

ActiveVOS Central and ActiveVOS Server

3 CAS 3x must have been installed and configured for use with

Tomcat

4 Authentication must be set up with users with role abTaskClient

and abTrust For simplicity you can test using Tomcatrsquos tomcat-

Copyright copy 2011 Active Endpoints Inc Page 7 of 30

usersxml as the user identity store Later you may choose to use

an LDAPJDBC identity store

The user with the role abTrust is the trusted user identity used by

ActiveVOS Server and ActiveVOS Central to establish a trusted

connection This is the identity used in the certificate configured

for use between ActiveVOS Server and Central and as such the

correct name (as identified in the tomcat-usersxml file) or the

LDAP distinguished name must match the userrsquos name

Instructions

1 Stop the Tomcat Server Delete the

ltTomcat_Homegtwebappsactivevos-central directory

2 Make sure you have the activebpel-certwar in the

ltTomcat_Homegtwebapps directory If you do not see them

copy them from the

ActiveVOS_Server_Installation_Directoryserver-

enterprisetomcat_configwebapps folder to the

ltTomcat_Homegtwebapps folder

2 Make a copy of the existing activevos-centralwar in a location

completely outside of the Tomcat installation directories

3 Modify the webxml in activevos-centralwar and setup lsquoCASrsquo

filters by making the following updates

File location activevos-centralwar gt WEB-INF gt webxml

From the webxml found at Appendix A of this

document search for ldquolt-- BEGIN CAS --gt rdquo

Copy the snippet from lt-- BEGIN CAS --gt until lt-- END

CAS --gt and snap them in the exact location in your

webxml Please use ActiveVOS Designerrsquos XML editor for

this purpose and ensure that the XML file is well-formed

before saving it

Make sure you change the ltHOSTNAMEgt to the host

where you have the activevos server running

Copyright copy 2011 Active Endpoints Inc Page 8 of 30

Please note that the host name that you provide should

match with the ldquoCNrdquo (Common Name) of the keystore

that you generate

4 Modify the aeWorkFlow-Configxml file and make the following

updates

File location webappsactivevos-centralwarWEB-INF

aeWorkFlow-Configxml

Search for ldquoHtTaskClientServiceCertUrlrdquo If the entire

entry is commented out uncomment them and modify

the host as the host where the activevos server is

installed

Search for the text ldquoEnable single signonrdquo Just beneath

them yoursquoll find two entries ndash SingleSignOnMode and

SingleSignOnLogoutUrl Make sure these entries are not

commented out and modify the host name to the host

where the ActiveVOS Server is installed

5 Save these files and restart the ActiveVOS Server

6 Make sure the Identity Service is configured for lsquoAuthorizationrsquo in

the ActiveVOS Console ndash under ActiveVOS Console gt Admin gt

Identity Services Ideally it should be the same provider as used

the lsquoAuthenticationrsquo In this case it is tomcat-usersxml

Testing Assuming the certificates roles have been setup correctly when you try

to access the httphostserveractivevos-central you would be

redirected to Jasig CAS Login page Once logged in you should be able to

see the ActiveVOS Central main home page that lists the tasks for the

user logged in

Copyright copy 2011 Active Endpoints Inc Page 9 of 30

Configuring CAS for ActiveVOS Console

Detailed Steps 1 Stop the Tomcat Server Delete the

ltTomcat_Homegtwebappsactivevos directory

2 Make a copy of the existing activevoswar in a location

completely outside of the Tomcat installation directories

3 Modify the webxml in activevoswar and setup lsquoCASrsquo filters by

making the following updates

File location activevos gt WEB-INF gt webxml

From the webxml found at Appendix B of this document

search for ldquolt-- BEGIN CAS --gt rdquo

Copy the snippet from lt-- BEGIN CAS --gt until lt-- END

CAS --gt and snap them in the exact location in your

webxml Please use ActiveVOS Designerrsquos XML editor for

this purpose and ensure that the XML file is well-formed

before saving it

Make sure you change the ltHOSTNAMEgt to the host

where you have the activevos server running

4 Move the modified activevoswar to the webapps directory and

restart the ActiveVOS Server

Testing Assuming the certificates roles have been setup correctly when you try

to access the httphostserveractivevos you would be redirected to

Jasig CAS Login page Once logged in you should be able to see the

ActiveVOS Console main home page

Copyright copy 2011 Active Endpoints Inc Page 10 of 30

Troubleshooting

1 Sometimes the user may notice handshake exceptions It is a best

practice to add the following java property to the server startup so that

user may see more information about the handshake

-Djavaxnetdebug=sslhandshake

2 It is also good to add the following trust store and keystore system

properties which can point to the specific file This will help the server

pick the exact ones rather than choose the default store which may vary

from environment to environment jdk to jdk

-DjavaxnetssltrustStore

-DjavaxnetssltrustStorePassword

-DjavaxnetssltrustStoreType

-DjavaxnetsslkeyStore

-DjavaxnetsslkeyStorePassword

The above properties would avoid any kind of trust issues The above

properties are well-documented at

httpdownloadoraclecomjavase6docstechnotesguidessecurityjs

seJSSERefGuidehtmlTroubleshooting

Copyright copy 2011 Active Endpoints Inc Page 11 of 30

About Active Endpoints Active Endpoints (wwwactivevoscom) ActiveVOS is the leader in service-

oriented BPM software for process automation ActiveVOS empowers

project teams to create business process management (BPM)

applications using services making their businesses more agile and

effective ActiveVOS promotes mass adoption of SOA-enabled BPM

applications by focusing on accelerating project delivery time with a

complete affordable and easy-to-use system Active Endpoints is

headquartered in Waltham MA with development facilities in Shelton

CT

To find out how Active Endpoints can help your business visit

httpwwwactivevoscom call +1 781 547 2900 and press 1 for Sales or

email us at infoactivevoscom

Copyright copy 2011 Active Endpoints Inc Page 12 of 30

Appendix A ndash ActiveVOS Centralrsquos webxml WAR File

ltxml version=10 encoding=UTF-8gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance id=WebApp_ID version=24 xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsdgt ltdisplay-namegtWorkFlow Application Console(Active Endpoints Inc)ltdisplay-namegt lt-- Application Name that is display in the UI --gt ltcontext-paramgt ltparam-namegtaeworkflownameltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowinboxcontextpathltparam-namegt ltparam-valuegtinboxltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowavccontextpathltparam-namegt ltparam-valuegtavcltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowskiploginltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowconfigfilenameltparam-namegt ltparam-valuegtaeworkflow-configxmlltparam-valuegt ltcontext-paramgt lt-- String resource bundle --gt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegtorgactivebpelb4pwarwebAeTaskWarBundleltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegtWEB-INFaeworkflowltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NDetectionFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeI18NResourceFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NResourceFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeWorkFlowRequestFilterltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 13 of 30

ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443activevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 14 of 30

lt-- END CAS --gt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcavcjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcindexjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavctasklturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcformviewerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatelturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatepickerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjslayoutlturl-patterngt ltfilter-mappinggt ltlistenergt ltlistener-classgtorgactivebpelb4pwarwebservletAeWorkFlowContextListenerltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeWorkFlowAttachmentDownloadServletltservlet-classgt ltload-on-startupgt50ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet rendering task detail using xslltdisplay-namegt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt

Copyright copy 2011 Active Endpoints Inc Page 15 of 30

ltservlet-classgtorgactivebpelb4pwarxslAeWorkFlowRenderTaskXslServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc task renderings dispatch servlet --gt ltservletgt ltdisplay-namegtTask detail rendering dispatch servletltdisplay-namegt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeTaskRenderingDispatchServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc get form servlet --gt ltservletgt ltdisplay-namegtServlet that returns task or request form htmlltdisplay-namegt ltservlet-namegtAeGetFormServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet that returns form viewerltdisplay-namegt ltservlet-namegtAeGetFormViewerServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormViewerServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- task add attachment servlet --gt ltservletgt ltdisplay-namegtServlet responsible for adding task attachments from ajax formltdisplay-namegt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeAjaxAddTaskAttachmentServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- central proxy servlet --gt ltservletgt ltdisplay-namegtAjax Proxy Servletltdisplay-namegt ltservlet-namegtAjaxProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAjaxProxyServletltservlet-classgt ltservletgt lt-- central localization proxy servlet --gt ltservletgt ltdisplay-namegtCentral Localization Proxy Servletltdisplay-namegt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLocalizationProxyServletltservlet-classgt ltservletgt lt-- reports proxy servlet --gt ltservletgt ltdisplay-namegtReports Proxy Servletltdisplay-namegt ltservlet-namegtReportsProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyServletltservlet-classgt ltservletgt ltservletgt ltdisplay-namegtReports Proxy Cancel Servletltdisplay-namegt ltservlet-namegtReportsProxyCancelServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyCancelServletltservlet-classgt ltservletgt lt-- avc catalog proxy servlet --gt

Copyright copy 2011 Active Endpoints Inc Page 16 of 30

ltservletgt ltdisplay-namegtAVC Catalog Proxy Servletltdisplay-namegt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAvcCatalogProxyServletltservlet-classgt ltservletgt lt-- login checker servlet --gt ltservletgt ltdisplay-namegtLogin Session Check Servletltdisplay-namegt ltservlet-namegtAeLoginCheckServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLoginCheckServletltservlet-classgt ltservletgt lt-- inbox get task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtinboxgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- avc task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtavcgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- All GETs to task detail goes through the dispatcher --gt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtinboxtasklturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtavctasklturl-patterngt ltservlet-mappinggt lt-- Internal servlet that handles XSL rendering --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt lturl-patterngtinboxinternalAeWorkFlowRenderTaskXslServletlturl-patterngt ltservlet-mappinggt lt-- Servlet that returns the html for the task and request forms --gt ltservlet-mappinggt ltservlet-namegtAeGetFormServletltservlet-namegt lturl-patterngtavcformlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeGetFormViewerServletltservlet-namegt lturl-patterngtavcformviewerlturl-patterngt ltservlet-mappinggt lt-- central proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtavcproxylturl-patterngt ltservlet-mappinggt lt-- central localization proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt lturl-patterngti18nlturl-patterngt ltservlet-mappinggt lt-- unsecured proxy --gt

Copyright copy 2011 Active Endpoints Inc Page 17 of 30

ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtproxylturl-patterngt ltservlet-mappinggt lt-- catalog servlet proxy --gt ltservlet-mappinggt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt lturl-patterngtavccataloglturl-patterngt ltservlet-mappinggt lt-- reports proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtReportsProxyCancelServletltservlet-namegt lturl-patterngtavcCancelTaskjsplturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcbirtreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcextractlturl-patterngt ltservlet-mappinggt lt-- Add attachment --gt ltservlet-mappinggt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt lturl-patterngtavcaddTaskAttachmentlturl-patterngt ltservlet-mappinggt lt-- Login checker --gt ltservlet-mappinggt ltservlet-namegtAeLoginCheckServletltservlet-namegt lturl-patterngtloginchecklturl-patterngt ltservlet-mappinggt lt-- JSP_SERVLET_BEGIN ltservlet-mappinggt ltservlet-namegtjspltservlet-namegt lturl-patterngtjspflturl-patterngt ltservlet-mappinggt JSP_SERVLET_END --gt ltsession-configgt lt-- Default to 30 minute session timeouts --gt ltsession-timeoutgt30ltsession-timeoutgt ltsession-configgt lt-- MIME mapping --gt ltmime-mappinggt ltextensiongtcssltextensiongt ltmime-typegttextcssltmime-typegt ltmime-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 18 of 30

ltmime-mappinggt ltextensiongtdocltextensiongt ltmime-typegtapplicationvndms-wordltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtdspltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtgifltextensiongt ltmime-typegtimagegifltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjnlpltextensiongt ltmime-typegtapplicationx-java-jnlp-fileltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpegltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpgltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjsltextensiongt ltmime-typegtapplicationx-javascriptltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpdfltextensiongt ltmime-typegtapplicationpdfltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpngltextensiongt ltmime-typegtimagepngltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongttxtltextensiongt ltmime-typegttextplainltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxlsltextensiongt ltmime-typegtapplicationvndms-excelltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxmlltextensiongt ltmime-typegttextxmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxulltextensiongt ltmime-typegtapplicationvndmozillaxul-xmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzhtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzipltextensiongt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 6 of 30

Configure SSL between ActiveVOS Central and the ActiveVOS Server

Configure a keystore containing a certificate with a private key

on each server

Import the certificates for the other servers into each servers

trust store

Configure the SSL connector for ActiveVOS Server to issue

challenges for Client Certificates

Assign certificate principals to the required roles (abTrust and

abTaskClient)

Updating the aeWorkFlow-Configxml file

Provide a URL for certificate requests to ActiveVOS Server by

specifying it in this location

lt-- WS-HT Task Client operations service URL --gt lt-- This endpoint must be secured with roles abTaskClient and abTrust--gt ltentry name=HtTaskClientServiceCertUrl value=httpshostportactivebpel-certservicesAeB4PTaskClient-taskOperations gt

Enable SSO Mode by enabling it in this location

lt-- Enable single sign-on mode (requires CAS or similar SSO

framework) --gt

ltentry name=SingleSignOnMode value=client-cert gt

ltentry name=SingleSignOnLogoutUrl

value=httpshostportcaslogout gt

Detailed Steps

Pre-Requisites

1 ActiveVOS Central and ActiveVOS Server 80 need to have been

installed on Apache Tomcat 6

2 Tomcat should be SSL-enabled (via its lsquoserverxmlrsquo file) The

certificates must be set up for the communication between the

ActiveVOS Central and ActiveVOS Server

3 CAS 3x must have been installed and configured for use with

Tomcat

4 Authentication must be set up with users with role abTaskClient

and abTrust For simplicity you can test using Tomcatrsquos tomcat-

Copyright copy 2011 Active Endpoints Inc Page 7 of 30

usersxml as the user identity store Later you may choose to use

an LDAPJDBC identity store

The user with the role abTrust is the trusted user identity used by

ActiveVOS Server and ActiveVOS Central to establish a trusted

connection This is the identity used in the certificate configured

for use between ActiveVOS Server and Central and as such the

correct name (as identified in the tomcat-usersxml file) or the

LDAP distinguished name must match the userrsquos name

Instructions

1 Stop the Tomcat Server Delete the

ltTomcat_Homegtwebappsactivevos-central directory

2 Make sure you have the activebpel-certwar in the

ltTomcat_Homegtwebapps directory If you do not see them

copy them from the

ActiveVOS_Server_Installation_Directoryserver-

enterprisetomcat_configwebapps folder to the

ltTomcat_Homegtwebapps folder

2 Make a copy of the existing activevos-centralwar in a location

completely outside of the Tomcat installation directories

3 Modify the webxml in activevos-centralwar and setup lsquoCASrsquo

filters by making the following updates

File location activevos-centralwar gt WEB-INF gt webxml

From the webxml found at Appendix A of this

document search for ldquolt-- BEGIN CAS --gt rdquo

Copy the snippet from lt-- BEGIN CAS --gt until lt-- END

CAS --gt and snap them in the exact location in your

webxml Please use ActiveVOS Designerrsquos XML editor for

this purpose and ensure that the XML file is well-formed

before saving it

Make sure you change the ltHOSTNAMEgt to the host

where you have the activevos server running

Copyright copy 2011 Active Endpoints Inc Page 8 of 30

Please note that the host name that you provide should

match with the ldquoCNrdquo (Common Name) of the keystore

that you generate

4 Modify the aeWorkFlow-Configxml file and make the following

updates

File location webappsactivevos-centralwarWEB-INF

aeWorkFlow-Configxml

Search for ldquoHtTaskClientServiceCertUrlrdquo If the entire

entry is commented out uncomment them and modify

the host as the host where the activevos server is

installed

Search for the text ldquoEnable single signonrdquo Just beneath

them yoursquoll find two entries ndash SingleSignOnMode and

SingleSignOnLogoutUrl Make sure these entries are not

commented out and modify the host name to the host

where the ActiveVOS Server is installed

5 Save these files and restart the ActiveVOS Server

6 Make sure the Identity Service is configured for lsquoAuthorizationrsquo in

the ActiveVOS Console ndash under ActiveVOS Console gt Admin gt

Identity Services Ideally it should be the same provider as used

the lsquoAuthenticationrsquo In this case it is tomcat-usersxml

Testing Assuming the certificates roles have been setup correctly when you try

to access the httphostserveractivevos-central you would be

redirected to Jasig CAS Login page Once logged in you should be able to

see the ActiveVOS Central main home page that lists the tasks for the

user logged in

Copyright copy 2011 Active Endpoints Inc Page 9 of 30

Configuring CAS for ActiveVOS Console

Detailed Steps 1 Stop the Tomcat Server Delete the

ltTomcat_Homegtwebappsactivevos directory

2 Make a copy of the existing activevoswar in a location

completely outside of the Tomcat installation directories

3 Modify the webxml in activevoswar and setup lsquoCASrsquo filters by

making the following updates

File location activevos gt WEB-INF gt webxml

From the webxml found at Appendix B of this document

search for ldquolt-- BEGIN CAS --gt rdquo

Copy the snippet from lt-- BEGIN CAS --gt until lt-- END

CAS --gt and snap them in the exact location in your

webxml Please use ActiveVOS Designerrsquos XML editor for

this purpose and ensure that the XML file is well-formed

before saving it

Make sure you change the ltHOSTNAMEgt to the host

where you have the activevos server running

4 Move the modified activevoswar to the webapps directory and

restart the ActiveVOS Server

Testing Assuming the certificates roles have been setup correctly when you try

to access the httphostserveractivevos you would be redirected to

Jasig CAS Login page Once logged in you should be able to see the

ActiveVOS Console main home page

Copyright copy 2011 Active Endpoints Inc Page 10 of 30

Troubleshooting

1 Sometimes the user may notice handshake exceptions It is a best

practice to add the following java property to the server startup so that

user may see more information about the handshake

-Djavaxnetdebug=sslhandshake

2 It is also good to add the following trust store and keystore system

properties which can point to the specific file This will help the server

pick the exact ones rather than choose the default store which may vary

from environment to environment jdk to jdk

-DjavaxnetssltrustStore

-DjavaxnetssltrustStorePassword

-DjavaxnetssltrustStoreType

-DjavaxnetsslkeyStore

-DjavaxnetsslkeyStorePassword

The above properties would avoid any kind of trust issues The above

properties are well-documented at

httpdownloadoraclecomjavase6docstechnotesguidessecurityjs

seJSSERefGuidehtmlTroubleshooting

Copyright copy 2011 Active Endpoints Inc Page 11 of 30

About Active Endpoints Active Endpoints (wwwactivevoscom) ActiveVOS is the leader in service-

oriented BPM software for process automation ActiveVOS empowers

project teams to create business process management (BPM)

applications using services making their businesses more agile and

effective ActiveVOS promotes mass adoption of SOA-enabled BPM

applications by focusing on accelerating project delivery time with a

complete affordable and easy-to-use system Active Endpoints is

headquartered in Waltham MA with development facilities in Shelton

CT

To find out how Active Endpoints can help your business visit

httpwwwactivevoscom call +1 781 547 2900 and press 1 for Sales or

email us at infoactivevoscom

Copyright copy 2011 Active Endpoints Inc Page 12 of 30

Appendix A ndash ActiveVOS Centralrsquos webxml WAR File

ltxml version=10 encoding=UTF-8gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance id=WebApp_ID version=24 xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsdgt ltdisplay-namegtWorkFlow Application Console(Active Endpoints Inc)ltdisplay-namegt lt-- Application Name that is display in the UI --gt ltcontext-paramgt ltparam-namegtaeworkflownameltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowinboxcontextpathltparam-namegt ltparam-valuegtinboxltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowavccontextpathltparam-namegt ltparam-valuegtavcltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowskiploginltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowconfigfilenameltparam-namegt ltparam-valuegtaeworkflow-configxmlltparam-valuegt ltcontext-paramgt lt-- String resource bundle --gt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegtorgactivebpelb4pwarwebAeTaskWarBundleltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegtWEB-INFaeworkflowltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NDetectionFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeI18NResourceFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NResourceFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeWorkFlowRequestFilterltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 13 of 30

ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443activevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 14 of 30

lt-- END CAS --gt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcavcjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcindexjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavctasklturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcformviewerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatelturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatepickerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjslayoutlturl-patterngt ltfilter-mappinggt ltlistenergt ltlistener-classgtorgactivebpelb4pwarwebservletAeWorkFlowContextListenerltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeWorkFlowAttachmentDownloadServletltservlet-classgt ltload-on-startupgt50ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet rendering task detail using xslltdisplay-namegt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt

Copyright copy 2011 Active Endpoints Inc Page 15 of 30

ltservlet-classgtorgactivebpelb4pwarxslAeWorkFlowRenderTaskXslServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc task renderings dispatch servlet --gt ltservletgt ltdisplay-namegtTask detail rendering dispatch servletltdisplay-namegt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeTaskRenderingDispatchServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc get form servlet --gt ltservletgt ltdisplay-namegtServlet that returns task or request form htmlltdisplay-namegt ltservlet-namegtAeGetFormServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet that returns form viewerltdisplay-namegt ltservlet-namegtAeGetFormViewerServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormViewerServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- task add attachment servlet --gt ltservletgt ltdisplay-namegtServlet responsible for adding task attachments from ajax formltdisplay-namegt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeAjaxAddTaskAttachmentServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- central proxy servlet --gt ltservletgt ltdisplay-namegtAjax Proxy Servletltdisplay-namegt ltservlet-namegtAjaxProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAjaxProxyServletltservlet-classgt ltservletgt lt-- central localization proxy servlet --gt ltservletgt ltdisplay-namegtCentral Localization Proxy Servletltdisplay-namegt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLocalizationProxyServletltservlet-classgt ltservletgt lt-- reports proxy servlet --gt ltservletgt ltdisplay-namegtReports Proxy Servletltdisplay-namegt ltservlet-namegtReportsProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyServletltservlet-classgt ltservletgt ltservletgt ltdisplay-namegtReports Proxy Cancel Servletltdisplay-namegt ltservlet-namegtReportsProxyCancelServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyCancelServletltservlet-classgt ltservletgt lt-- avc catalog proxy servlet --gt

Copyright copy 2011 Active Endpoints Inc Page 16 of 30

ltservletgt ltdisplay-namegtAVC Catalog Proxy Servletltdisplay-namegt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAvcCatalogProxyServletltservlet-classgt ltservletgt lt-- login checker servlet --gt ltservletgt ltdisplay-namegtLogin Session Check Servletltdisplay-namegt ltservlet-namegtAeLoginCheckServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLoginCheckServletltservlet-classgt ltservletgt lt-- inbox get task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtinboxgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- avc task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtavcgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- All GETs to task detail goes through the dispatcher --gt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtinboxtasklturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtavctasklturl-patterngt ltservlet-mappinggt lt-- Internal servlet that handles XSL rendering --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt lturl-patterngtinboxinternalAeWorkFlowRenderTaskXslServletlturl-patterngt ltservlet-mappinggt lt-- Servlet that returns the html for the task and request forms --gt ltservlet-mappinggt ltservlet-namegtAeGetFormServletltservlet-namegt lturl-patterngtavcformlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeGetFormViewerServletltservlet-namegt lturl-patterngtavcformviewerlturl-patterngt ltservlet-mappinggt lt-- central proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtavcproxylturl-patterngt ltservlet-mappinggt lt-- central localization proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt lturl-patterngti18nlturl-patterngt ltservlet-mappinggt lt-- unsecured proxy --gt

Copyright copy 2011 Active Endpoints Inc Page 17 of 30

ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtproxylturl-patterngt ltservlet-mappinggt lt-- catalog servlet proxy --gt ltservlet-mappinggt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt lturl-patterngtavccataloglturl-patterngt ltservlet-mappinggt lt-- reports proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtReportsProxyCancelServletltservlet-namegt lturl-patterngtavcCancelTaskjsplturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcbirtreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcextractlturl-patterngt ltservlet-mappinggt lt-- Add attachment --gt ltservlet-mappinggt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt lturl-patterngtavcaddTaskAttachmentlturl-patterngt ltservlet-mappinggt lt-- Login checker --gt ltservlet-mappinggt ltservlet-namegtAeLoginCheckServletltservlet-namegt lturl-patterngtloginchecklturl-patterngt ltservlet-mappinggt lt-- JSP_SERVLET_BEGIN ltservlet-mappinggt ltservlet-namegtjspltservlet-namegt lturl-patterngtjspflturl-patterngt ltservlet-mappinggt JSP_SERVLET_END --gt ltsession-configgt lt-- Default to 30 minute session timeouts --gt ltsession-timeoutgt30ltsession-timeoutgt ltsession-configgt lt-- MIME mapping --gt ltmime-mappinggt ltextensiongtcssltextensiongt ltmime-typegttextcssltmime-typegt ltmime-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 18 of 30

ltmime-mappinggt ltextensiongtdocltextensiongt ltmime-typegtapplicationvndms-wordltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtdspltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtgifltextensiongt ltmime-typegtimagegifltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjnlpltextensiongt ltmime-typegtapplicationx-java-jnlp-fileltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpegltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpgltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjsltextensiongt ltmime-typegtapplicationx-javascriptltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpdfltextensiongt ltmime-typegtapplicationpdfltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpngltextensiongt ltmime-typegtimagepngltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongttxtltextensiongt ltmime-typegttextplainltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxlsltextensiongt ltmime-typegtapplicationvndms-excelltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxmlltextensiongt ltmime-typegttextxmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxulltextensiongt ltmime-typegtapplicationvndmozillaxul-xmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzhtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzipltextensiongt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 7 of 30

usersxml as the user identity store Later you may choose to use

an LDAPJDBC identity store

The user with the role abTrust is the trusted user identity used by

ActiveVOS Server and ActiveVOS Central to establish a trusted

connection This is the identity used in the certificate configured

for use between ActiveVOS Server and Central and as such the

correct name (as identified in the tomcat-usersxml file) or the

LDAP distinguished name must match the userrsquos name

Instructions

1 Stop the Tomcat Server Delete the

ltTomcat_Homegtwebappsactivevos-central directory

2 Make sure you have the activebpel-certwar in the

ltTomcat_Homegtwebapps directory If you do not see them

copy them from the

ActiveVOS_Server_Installation_Directoryserver-

enterprisetomcat_configwebapps folder to the

ltTomcat_Homegtwebapps folder

2 Make a copy of the existing activevos-centralwar in a location

completely outside of the Tomcat installation directories

3 Modify the webxml in activevos-centralwar and setup lsquoCASrsquo

filters by making the following updates

File location activevos-centralwar gt WEB-INF gt webxml

From the webxml found at Appendix A of this

document search for ldquolt-- BEGIN CAS --gt rdquo

Copy the snippet from lt-- BEGIN CAS --gt until lt-- END

CAS --gt and snap them in the exact location in your

webxml Please use ActiveVOS Designerrsquos XML editor for

this purpose and ensure that the XML file is well-formed

before saving it

Make sure you change the ltHOSTNAMEgt to the host

where you have the activevos server running

Copyright copy 2011 Active Endpoints Inc Page 8 of 30

Please note that the host name that you provide should

match with the ldquoCNrdquo (Common Name) of the keystore

that you generate

4 Modify the aeWorkFlow-Configxml file and make the following

updates

File location webappsactivevos-centralwarWEB-INF

aeWorkFlow-Configxml

Search for ldquoHtTaskClientServiceCertUrlrdquo If the entire

entry is commented out uncomment them and modify

the host as the host where the activevos server is

installed

Search for the text ldquoEnable single signonrdquo Just beneath

them yoursquoll find two entries ndash SingleSignOnMode and

SingleSignOnLogoutUrl Make sure these entries are not

commented out and modify the host name to the host

where the ActiveVOS Server is installed

5 Save these files and restart the ActiveVOS Server

6 Make sure the Identity Service is configured for lsquoAuthorizationrsquo in

the ActiveVOS Console ndash under ActiveVOS Console gt Admin gt

Identity Services Ideally it should be the same provider as used

the lsquoAuthenticationrsquo In this case it is tomcat-usersxml

Testing Assuming the certificates roles have been setup correctly when you try

to access the httphostserveractivevos-central you would be

redirected to Jasig CAS Login page Once logged in you should be able to

see the ActiveVOS Central main home page that lists the tasks for the

user logged in

Copyright copy 2011 Active Endpoints Inc Page 9 of 30

Configuring CAS for ActiveVOS Console

Detailed Steps 1 Stop the Tomcat Server Delete the

ltTomcat_Homegtwebappsactivevos directory

2 Make a copy of the existing activevoswar in a location

completely outside of the Tomcat installation directories

3 Modify the webxml in activevoswar and setup lsquoCASrsquo filters by

making the following updates

File location activevos gt WEB-INF gt webxml

From the webxml found at Appendix B of this document

search for ldquolt-- BEGIN CAS --gt rdquo

Copy the snippet from lt-- BEGIN CAS --gt until lt-- END

CAS --gt and snap them in the exact location in your

webxml Please use ActiveVOS Designerrsquos XML editor for

this purpose and ensure that the XML file is well-formed

before saving it

Make sure you change the ltHOSTNAMEgt to the host

where you have the activevos server running

4 Move the modified activevoswar to the webapps directory and

restart the ActiveVOS Server

Testing Assuming the certificates roles have been setup correctly when you try

to access the httphostserveractivevos you would be redirected to

Jasig CAS Login page Once logged in you should be able to see the

ActiveVOS Console main home page

Copyright copy 2011 Active Endpoints Inc Page 10 of 30

Troubleshooting

1 Sometimes the user may notice handshake exceptions It is a best

practice to add the following java property to the server startup so that

user may see more information about the handshake

-Djavaxnetdebug=sslhandshake

2 It is also good to add the following trust store and keystore system

properties which can point to the specific file This will help the server

pick the exact ones rather than choose the default store which may vary

from environment to environment jdk to jdk

-DjavaxnetssltrustStore

-DjavaxnetssltrustStorePassword

-DjavaxnetssltrustStoreType

-DjavaxnetsslkeyStore

-DjavaxnetsslkeyStorePassword

The above properties would avoid any kind of trust issues The above

properties are well-documented at

httpdownloadoraclecomjavase6docstechnotesguidessecurityjs

seJSSERefGuidehtmlTroubleshooting

Copyright copy 2011 Active Endpoints Inc Page 11 of 30

About Active Endpoints Active Endpoints (wwwactivevoscom) ActiveVOS is the leader in service-

oriented BPM software for process automation ActiveVOS empowers

project teams to create business process management (BPM)

applications using services making their businesses more agile and

effective ActiveVOS promotes mass adoption of SOA-enabled BPM

applications by focusing on accelerating project delivery time with a

complete affordable and easy-to-use system Active Endpoints is

headquartered in Waltham MA with development facilities in Shelton

CT

To find out how Active Endpoints can help your business visit

httpwwwactivevoscom call +1 781 547 2900 and press 1 for Sales or

email us at infoactivevoscom

Copyright copy 2011 Active Endpoints Inc Page 12 of 30

Appendix A ndash ActiveVOS Centralrsquos webxml WAR File

ltxml version=10 encoding=UTF-8gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance id=WebApp_ID version=24 xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsdgt ltdisplay-namegtWorkFlow Application Console(Active Endpoints Inc)ltdisplay-namegt lt-- Application Name that is display in the UI --gt ltcontext-paramgt ltparam-namegtaeworkflownameltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowinboxcontextpathltparam-namegt ltparam-valuegtinboxltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowavccontextpathltparam-namegt ltparam-valuegtavcltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowskiploginltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowconfigfilenameltparam-namegt ltparam-valuegtaeworkflow-configxmlltparam-valuegt ltcontext-paramgt lt-- String resource bundle --gt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegtorgactivebpelb4pwarwebAeTaskWarBundleltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegtWEB-INFaeworkflowltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NDetectionFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeI18NResourceFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NResourceFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeWorkFlowRequestFilterltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 13 of 30

ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443activevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 14 of 30

lt-- END CAS --gt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcavcjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcindexjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavctasklturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcformviewerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatelturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatepickerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjslayoutlturl-patterngt ltfilter-mappinggt ltlistenergt ltlistener-classgtorgactivebpelb4pwarwebservletAeWorkFlowContextListenerltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeWorkFlowAttachmentDownloadServletltservlet-classgt ltload-on-startupgt50ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet rendering task detail using xslltdisplay-namegt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt

Copyright copy 2011 Active Endpoints Inc Page 15 of 30

ltservlet-classgtorgactivebpelb4pwarxslAeWorkFlowRenderTaskXslServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc task renderings dispatch servlet --gt ltservletgt ltdisplay-namegtTask detail rendering dispatch servletltdisplay-namegt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeTaskRenderingDispatchServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc get form servlet --gt ltservletgt ltdisplay-namegtServlet that returns task or request form htmlltdisplay-namegt ltservlet-namegtAeGetFormServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet that returns form viewerltdisplay-namegt ltservlet-namegtAeGetFormViewerServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormViewerServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- task add attachment servlet --gt ltservletgt ltdisplay-namegtServlet responsible for adding task attachments from ajax formltdisplay-namegt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeAjaxAddTaskAttachmentServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- central proxy servlet --gt ltservletgt ltdisplay-namegtAjax Proxy Servletltdisplay-namegt ltservlet-namegtAjaxProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAjaxProxyServletltservlet-classgt ltservletgt lt-- central localization proxy servlet --gt ltservletgt ltdisplay-namegtCentral Localization Proxy Servletltdisplay-namegt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLocalizationProxyServletltservlet-classgt ltservletgt lt-- reports proxy servlet --gt ltservletgt ltdisplay-namegtReports Proxy Servletltdisplay-namegt ltservlet-namegtReportsProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyServletltservlet-classgt ltservletgt ltservletgt ltdisplay-namegtReports Proxy Cancel Servletltdisplay-namegt ltservlet-namegtReportsProxyCancelServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyCancelServletltservlet-classgt ltservletgt lt-- avc catalog proxy servlet --gt

Copyright copy 2011 Active Endpoints Inc Page 16 of 30

ltservletgt ltdisplay-namegtAVC Catalog Proxy Servletltdisplay-namegt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAvcCatalogProxyServletltservlet-classgt ltservletgt lt-- login checker servlet --gt ltservletgt ltdisplay-namegtLogin Session Check Servletltdisplay-namegt ltservlet-namegtAeLoginCheckServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLoginCheckServletltservlet-classgt ltservletgt lt-- inbox get task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtinboxgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- avc task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtavcgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- All GETs to task detail goes through the dispatcher --gt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtinboxtasklturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtavctasklturl-patterngt ltservlet-mappinggt lt-- Internal servlet that handles XSL rendering --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt lturl-patterngtinboxinternalAeWorkFlowRenderTaskXslServletlturl-patterngt ltservlet-mappinggt lt-- Servlet that returns the html for the task and request forms --gt ltservlet-mappinggt ltservlet-namegtAeGetFormServletltservlet-namegt lturl-patterngtavcformlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeGetFormViewerServletltservlet-namegt lturl-patterngtavcformviewerlturl-patterngt ltservlet-mappinggt lt-- central proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtavcproxylturl-patterngt ltservlet-mappinggt lt-- central localization proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt lturl-patterngti18nlturl-patterngt ltservlet-mappinggt lt-- unsecured proxy --gt

Copyright copy 2011 Active Endpoints Inc Page 17 of 30

ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtproxylturl-patterngt ltservlet-mappinggt lt-- catalog servlet proxy --gt ltservlet-mappinggt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt lturl-patterngtavccataloglturl-patterngt ltservlet-mappinggt lt-- reports proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtReportsProxyCancelServletltservlet-namegt lturl-patterngtavcCancelTaskjsplturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcbirtreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcextractlturl-patterngt ltservlet-mappinggt lt-- Add attachment --gt ltservlet-mappinggt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt lturl-patterngtavcaddTaskAttachmentlturl-patterngt ltservlet-mappinggt lt-- Login checker --gt ltservlet-mappinggt ltservlet-namegtAeLoginCheckServletltservlet-namegt lturl-patterngtloginchecklturl-patterngt ltservlet-mappinggt lt-- JSP_SERVLET_BEGIN ltservlet-mappinggt ltservlet-namegtjspltservlet-namegt lturl-patterngtjspflturl-patterngt ltservlet-mappinggt JSP_SERVLET_END --gt ltsession-configgt lt-- Default to 30 minute session timeouts --gt ltsession-timeoutgt30ltsession-timeoutgt ltsession-configgt lt-- MIME mapping --gt ltmime-mappinggt ltextensiongtcssltextensiongt ltmime-typegttextcssltmime-typegt ltmime-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 18 of 30

ltmime-mappinggt ltextensiongtdocltextensiongt ltmime-typegtapplicationvndms-wordltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtdspltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtgifltextensiongt ltmime-typegtimagegifltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjnlpltextensiongt ltmime-typegtapplicationx-java-jnlp-fileltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpegltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpgltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjsltextensiongt ltmime-typegtapplicationx-javascriptltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpdfltextensiongt ltmime-typegtapplicationpdfltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpngltextensiongt ltmime-typegtimagepngltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongttxtltextensiongt ltmime-typegttextplainltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxlsltextensiongt ltmime-typegtapplicationvndms-excelltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxmlltextensiongt ltmime-typegttextxmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxulltextensiongt ltmime-typegtapplicationvndmozillaxul-xmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzhtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzipltextensiongt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 8 of 30

Please note that the host name that you provide should

match with the ldquoCNrdquo (Common Name) of the keystore

that you generate

4 Modify the aeWorkFlow-Configxml file and make the following

updates

File location webappsactivevos-centralwarWEB-INF

aeWorkFlow-Configxml

Search for ldquoHtTaskClientServiceCertUrlrdquo If the entire

entry is commented out uncomment them and modify

the host as the host where the activevos server is

installed

Search for the text ldquoEnable single signonrdquo Just beneath

them yoursquoll find two entries ndash SingleSignOnMode and

SingleSignOnLogoutUrl Make sure these entries are not

commented out and modify the host name to the host

where the ActiveVOS Server is installed

5 Save these files and restart the ActiveVOS Server

6 Make sure the Identity Service is configured for lsquoAuthorizationrsquo in

the ActiveVOS Console ndash under ActiveVOS Console gt Admin gt

Identity Services Ideally it should be the same provider as used

the lsquoAuthenticationrsquo In this case it is tomcat-usersxml

Testing Assuming the certificates roles have been setup correctly when you try

to access the httphostserveractivevos-central you would be

redirected to Jasig CAS Login page Once logged in you should be able to

see the ActiveVOS Central main home page that lists the tasks for the

user logged in

Copyright copy 2011 Active Endpoints Inc Page 9 of 30

Configuring CAS for ActiveVOS Console

Detailed Steps 1 Stop the Tomcat Server Delete the

ltTomcat_Homegtwebappsactivevos directory

2 Make a copy of the existing activevoswar in a location

completely outside of the Tomcat installation directories

3 Modify the webxml in activevoswar and setup lsquoCASrsquo filters by

making the following updates

File location activevos gt WEB-INF gt webxml

From the webxml found at Appendix B of this document

search for ldquolt-- BEGIN CAS --gt rdquo

Copy the snippet from lt-- BEGIN CAS --gt until lt-- END

CAS --gt and snap them in the exact location in your

webxml Please use ActiveVOS Designerrsquos XML editor for

this purpose and ensure that the XML file is well-formed

before saving it

Make sure you change the ltHOSTNAMEgt to the host

where you have the activevos server running

4 Move the modified activevoswar to the webapps directory and

restart the ActiveVOS Server

Testing Assuming the certificates roles have been setup correctly when you try

to access the httphostserveractivevos you would be redirected to

Jasig CAS Login page Once logged in you should be able to see the

ActiveVOS Console main home page

Copyright copy 2011 Active Endpoints Inc Page 10 of 30

Troubleshooting

1 Sometimes the user may notice handshake exceptions It is a best

practice to add the following java property to the server startup so that

user may see more information about the handshake

-Djavaxnetdebug=sslhandshake

2 It is also good to add the following trust store and keystore system

properties which can point to the specific file This will help the server

pick the exact ones rather than choose the default store which may vary

from environment to environment jdk to jdk

-DjavaxnetssltrustStore

-DjavaxnetssltrustStorePassword

-DjavaxnetssltrustStoreType

-DjavaxnetsslkeyStore

-DjavaxnetsslkeyStorePassword

The above properties would avoid any kind of trust issues The above

properties are well-documented at

httpdownloadoraclecomjavase6docstechnotesguidessecurityjs

seJSSERefGuidehtmlTroubleshooting

Copyright copy 2011 Active Endpoints Inc Page 11 of 30

About Active Endpoints Active Endpoints (wwwactivevoscom) ActiveVOS is the leader in service-

oriented BPM software for process automation ActiveVOS empowers

project teams to create business process management (BPM)

applications using services making their businesses more agile and

effective ActiveVOS promotes mass adoption of SOA-enabled BPM

applications by focusing on accelerating project delivery time with a

complete affordable and easy-to-use system Active Endpoints is

headquartered in Waltham MA with development facilities in Shelton

CT

To find out how Active Endpoints can help your business visit

httpwwwactivevoscom call +1 781 547 2900 and press 1 for Sales or

email us at infoactivevoscom

Copyright copy 2011 Active Endpoints Inc Page 12 of 30

Appendix A ndash ActiveVOS Centralrsquos webxml WAR File

ltxml version=10 encoding=UTF-8gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance id=WebApp_ID version=24 xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsdgt ltdisplay-namegtWorkFlow Application Console(Active Endpoints Inc)ltdisplay-namegt lt-- Application Name that is display in the UI --gt ltcontext-paramgt ltparam-namegtaeworkflownameltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowinboxcontextpathltparam-namegt ltparam-valuegtinboxltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowavccontextpathltparam-namegt ltparam-valuegtavcltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowskiploginltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowconfigfilenameltparam-namegt ltparam-valuegtaeworkflow-configxmlltparam-valuegt ltcontext-paramgt lt-- String resource bundle --gt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegtorgactivebpelb4pwarwebAeTaskWarBundleltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegtWEB-INFaeworkflowltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NDetectionFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeI18NResourceFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NResourceFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeWorkFlowRequestFilterltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 13 of 30

ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443activevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 14 of 30

lt-- END CAS --gt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcavcjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcindexjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavctasklturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcformviewerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatelturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatepickerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjslayoutlturl-patterngt ltfilter-mappinggt ltlistenergt ltlistener-classgtorgactivebpelb4pwarwebservletAeWorkFlowContextListenerltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeWorkFlowAttachmentDownloadServletltservlet-classgt ltload-on-startupgt50ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet rendering task detail using xslltdisplay-namegt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt

Copyright copy 2011 Active Endpoints Inc Page 15 of 30

ltservlet-classgtorgactivebpelb4pwarxslAeWorkFlowRenderTaskXslServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc task renderings dispatch servlet --gt ltservletgt ltdisplay-namegtTask detail rendering dispatch servletltdisplay-namegt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeTaskRenderingDispatchServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc get form servlet --gt ltservletgt ltdisplay-namegtServlet that returns task or request form htmlltdisplay-namegt ltservlet-namegtAeGetFormServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet that returns form viewerltdisplay-namegt ltservlet-namegtAeGetFormViewerServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormViewerServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- task add attachment servlet --gt ltservletgt ltdisplay-namegtServlet responsible for adding task attachments from ajax formltdisplay-namegt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeAjaxAddTaskAttachmentServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- central proxy servlet --gt ltservletgt ltdisplay-namegtAjax Proxy Servletltdisplay-namegt ltservlet-namegtAjaxProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAjaxProxyServletltservlet-classgt ltservletgt lt-- central localization proxy servlet --gt ltservletgt ltdisplay-namegtCentral Localization Proxy Servletltdisplay-namegt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLocalizationProxyServletltservlet-classgt ltservletgt lt-- reports proxy servlet --gt ltservletgt ltdisplay-namegtReports Proxy Servletltdisplay-namegt ltservlet-namegtReportsProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyServletltservlet-classgt ltservletgt ltservletgt ltdisplay-namegtReports Proxy Cancel Servletltdisplay-namegt ltservlet-namegtReportsProxyCancelServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyCancelServletltservlet-classgt ltservletgt lt-- avc catalog proxy servlet --gt

Copyright copy 2011 Active Endpoints Inc Page 16 of 30

ltservletgt ltdisplay-namegtAVC Catalog Proxy Servletltdisplay-namegt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAvcCatalogProxyServletltservlet-classgt ltservletgt lt-- login checker servlet --gt ltservletgt ltdisplay-namegtLogin Session Check Servletltdisplay-namegt ltservlet-namegtAeLoginCheckServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLoginCheckServletltservlet-classgt ltservletgt lt-- inbox get task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtinboxgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- avc task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtavcgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- All GETs to task detail goes through the dispatcher --gt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtinboxtasklturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtavctasklturl-patterngt ltservlet-mappinggt lt-- Internal servlet that handles XSL rendering --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt lturl-patterngtinboxinternalAeWorkFlowRenderTaskXslServletlturl-patterngt ltservlet-mappinggt lt-- Servlet that returns the html for the task and request forms --gt ltservlet-mappinggt ltservlet-namegtAeGetFormServletltservlet-namegt lturl-patterngtavcformlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeGetFormViewerServletltservlet-namegt lturl-patterngtavcformviewerlturl-patterngt ltservlet-mappinggt lt-- central proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtavcproxylturl-patterngt ltservlet-mappinggt lt-- central localization proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt lturl-patterngti18nlturl-patterngt ltservlet-mappinggt lt-- unsecured proxy --gt

Copyright copy 2011 Active Endpoints Inc Page 17 of 30

ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtproxylturl-patterngt ltservlet-mappinggt lt-- catalog servlet proxy --gt ltservlet-mappinggt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt lturl-patterngtavccataloglturl-patterngt ltservlet-mappinggt lt-- reports proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtReportsProxyCancelServletltservlet-namegt lturl-patterngtavcCancelTaskjsplturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcbirtreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcextractlturl-patterngt ltservlet-mappinggt lt-- Add attachment --gt ltservlet-mappinggt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt lturl-patterngtavcaddTaskAttachmentlturl-patterngt ltservlet-mappinggt lt-- Login checker --gt ltservlet-mappinggt ltservlet-namegtAeLoginCheckServletltservlet-namegt lturl-patterngtloginchecklturl-patterngt ltservlet-mappinggt lt-- JSP_SERVLET_BEGIN ltservlet-mappinggt ltservlet-namegtjspltservlet-namegt lturl-patterngtjspflturl-patterngt ltservlet-mappinggt JSP_SERVLET_END --gt ltsession-configgt lt-- Default to 30 minute session timeouts --gt ltsession-timeoutgt30ltsession-timeoutgt ltsession-configgt lt-- MIME mapping --gt ltmime-mappinggt ltextensiongtcssltextensiongt ltmime-typegttextcssltmime-typegt ltmime-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 18 of 30

ltmime-mappinggt ltextensiongtdocltextensiongt ltmime-typegtapplicationvndms-wordltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtdspltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtgifltextensiongt ltmime-typegtimagegifltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjnlpltextensiongt ltmime-typegtapplicationx-java-jnlp-fileltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpegltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpgltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjsltextensiongt ltmime-typegtapplicationx-javascriptltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpdfltextensiongt ltmime-typegtapplicationpdfltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpngltextensiongt ltmime-typegtimagepngltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongttxtltextensiongt ltmime-typegttextplainltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxlsltextensiongt ltmime-typegtapplicationvndms-excelltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxmlltextensiongt ltmime-typegttextxmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxulltextensiongt ltmime-typegtapplicationvndmozillaxul-xmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzhtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzipltextensiongt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 9 of 30

Configuring CAS for ActiveVOS Console

Detailed Steps 1 Stop the Tomcat Server Delete the

ltTomcat_Homegtwebappsactivevos directory

2 Make a copy of the existing activevoswar in a location

completely outside of the Tomcat installation directories

3 Modify the webxml in activevoswar and setup lsquoCASrsquo filters by

making the following updates

File location activevos gt WEB-INF gt webxml

From the webxml found at Appendix B of this document

search for ldquolt-- BEGIN CAS --gt rdquo

Copy the snippet from lt-- BEGIN CAS --gt until lt-- END

CAS --gt and snap them in the exact location in your

webxml Please use ActiveVOS Designerrsquos XML editor for

this purpose and ensure that the XML file is well-formed

before saving it

Make sure you change the ltHOSTNAMEgt to the host

where you have the activevos server running

4 Move the modified activevoswar to the webapps directory and

restart the ActiveVOS Server

Testing Assuming the certificates roles have been setup correctly when you try

to access the httphostserveractivevos you would be redirected to

Jasig CAS Login page Once logged in you should be able to see the

ActiveVOS Console main home page

Copyright copy 2011 Active Endpoints Inc Page 10 of 30

Troubleshooting

1 Sometimes the user may notice handshake exceptions It is a best

practice to add the following java property to the server startup so that

user may see more information about the handshake

-Djavaxnetdebug=sslhandshake

2 It is also good to add the following trust store and keystore system

properties which can point to the specific file This will help the server

pick the exact ones rather than choose the default store which may vary

from environment to environment jdk to jdk

-DjavaxnetssltrustStore

-DjavaxnetssltrustStorePassword

-DjavaxnetssltrustStoreType

-DjavaxnetsslkeyStore

-DjavaxnetsslkeyStorePassword

The above properties would avoid any kind of trust issues The above

properties are well-documented at

httpdownloadoraclecomjavase6docstechnotesguidessecurityjs

seJSSERefGuidehtmlTroubleshooting

Copyright copy 2011 Active Endpoints Inc Page 11 of 30

About Active Endpoints Active Endpoints (wwwactivevoscom) ActiveVOS is the leader in service-

oriented BPM software for process automation ActiveVOS empowers

project teams to create business process management (BPM)

applications using services making their businesses more agile and

effective ActiveVOS promotes mass adoption of SOA-enabled BPM

applications by focusing on accelerating project delivery time with a

complete affordable and easy-to-use system Active Endpoints is

headquartered in Waltham MA with development facilities in Shelton

CT

To find out how Active Endpoints can help your business visit

httpwwwactivevoscom call +1 781 547 2900 and press 1 for Sales or

email us at infoactivevoscom

Copyright copy 2011 Active Endpoints Inc Page 12 of 30

Appendix A ndash ActiveVOS Centralrsquos webxml WAR File

ltxml version=10 encoding=UTF-8gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance id=WebApp_ID version=24 xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsdgt ltdisplay-namegtWorkFlow Application Console(Active Endpoints Inc)ltdisplay-namegt lt-- Application Name that is display in the UI --gt ltcontext-paramgt ltparam-namegtaeworkflownameltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowinboxcontextpathltparam-namegt ltparam-valuegtinboxltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowavccontextpathltparam-namegt ltparam-valuegtavcltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowskiploginltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowconfigfilenameltparam-namegt ltparam-valuegtaeworkflow-configxmlltparam-valuegt ltcontext-paramgt lt-- String resource bundle --gt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegtorgactivebpelb4pwarwebAeTaskWarBundleltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegtWEB-INFaeworkflowltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NDetectionFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeI18NResourceFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NResourceFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeWorkFlowRequestFilterltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 13 of 30

ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443activevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 14 of 30

lt-- END CAS --gt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcavcjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcindexjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavctasklturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcformviewerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatelturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatepickerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjslayoutlturl-patterngt ltfilter-mappinggt ltlistenergt ltlistener-classgtorgactivebpelb4pwarwebservletAeWorkFlowContextListenerltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeWorkFlowAttachmentDownloadServletltservlet-classgt ltload-on-startupgt50ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet rendering task detail using xslltdisplay-namegt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt

Copyright copy 2011 Active Endpoints Inc Page 15 of 30

ltservlet-classgtorgactivebpelb4pwarxslAeWorkFlowRenderTaskXslServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc task renderings dispatch servlet --gt ltservletgt ltdisplay-namegtTask detail rendering dispatch servletltdisplay-namegt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeTaskRenderingDispatchServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc get form servlet --gt ltservletgt ltdisplay-namegtServlet that returns task or request form htmlltdisplay-namegt ltservlet-namegtAeGetFormServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet that returns form viewerltdisplay-namegt ltservlet-namegtAeGetFormViewerServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormViewerServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- task add attachment servlet --gt ltservletgt ltdisplay-namegtServlet responsible for adding task attachments from ajax formltdisplay-namegt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeAjaxAddTaskAttachmentServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- central proxy servlet --gt ltservletgt ltdisplay-namegtAjax Proxy Servletltdisplay-namegt ltservlet-namegtAjaxProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAjaxProxyServletltservlet-classgt ltservletgt lt-- central localization proxy servlet --gt ltservletgt ltdisplay-namegtCentral Localization Proxy Servletltdisplay-namegt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLocalizationProxyServletltservlet-classgt ltservletgt lt-- reports proxy servlet --gt ltservletgt ltdisplay-namegtReports Proxy Servletltdisplay-namegt ltservlet-namegtReportsProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyServletltservlet-classgt ltservletgt ltservletgt ltdisplay-namegtReports Proxy Cancel Servletltdisplay-namegt ltservlet-namegtReportsProxyCancelServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyCancelServletltservlet-classgt ltservletgt lt-- avc catalog proxy servlet --gt

Copyright copy 2011 Active Endpoints Inc Page 16 of 30

ltservletgt ltdisplay-namegtAVC Catalog Proxy Servletltdisplay-namegt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAvcCatalogProxyServletltservlet-classgt ltservletgt lt-- login checker servlet --gt ltservletgt ltdisplay-namegtLogin Session Check Servletltdisplay-namegt ltservlet-namegtAeLoginCheckServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLoginCheckServletltservlet-classgt ltservletgt lt-- inbox get task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtinboxgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- avc task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtavcgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- All GETs to task detail goes through the dispatcher --gt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtinboxtasklturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtavctasklturl-patterngt ltservlet-mappinggt lt-- Internal servlet that handles XSL rendering --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt lturl-patterngtinboxinternalAeWorkFlowRenderTaskXslServletlturl-patterngt ltservlet-mappinggt lt-- Servlet that returns the html for the task and request forms --gt ltservlet-mappinggt ltservlet-namegtAeGetFormServletltservlet-namegt lturl-patterngtavcformlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeGetFormViewerServletltservlet-namegt lturl-patterngtavcformviewerlturl-patterngt ltservlet-mappinggt lt-- central proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtavcproxylturl-patterngt ltservlet-mappinggt lt-- central localization proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt lturl-patterngti18nlturl-patterngt ltservlet-mappinggt lt-- unsecured proxy --gt

Copyright copy 2011 Active Endpoints Inc Page 17 of 30

ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtproxylturl-patterngt ltservlet-mappinggt lt-- catalog servlet proxy --gt ltservlet-mappinggt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt lturl-patterngtavccataloglturl-patterngt ltservlet-mappinggt lt-- reports proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtReportsProxyCancelServletltservlet-namegt lturl-patterngtavcCancelTaskjsplturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcbirtreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcextractlturl-patterngt ltservlet-mappinggt lt-- Add attachment --gt ltservlet-mappinggt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt lturl-patterngtavcaddTaskAttachmentlturl-patterngt ltservlet-mappinggt lt-- Login checker --gt ltservlet-mappinggt ltservlet-namegtAeLoginCheckServletltservlet-namegt lturl-patterngtloginchecklturl-patterngt ltservlet-mappinggt lt-- JSP_SERVLET_BEGIN ltservlet-mappinggt ltservlet-namegtjspltservlet-namegt lturl-patterngtjspflturl-patterngt ltservlet-mappinggt JSP_SERVLET_END --gt ltsession-configgt lt-- Default to 30 minute session timeouts --gt ltsession-timeoutgt30ltsession-timeoutgt ltsession-configgt lt-- MIME mapping --gt ltmime-mappinggt ltextensiongtcssltextensiongt ltmime-typegttextcssltmime-typegt ltmime-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 18 of 30

ltmime-mappinggt ltextensiongtdocltextensiongt ltmime-typegtapplicationvndms-wordltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtdspltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtgifltextensiongt ltmime-typegtimagegifltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjnlpltextensiongt ltmime-typegtapplicationx-java-jnlp-fileltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpegltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpgltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjsltextensiongt ltmime-typegtapplicationx-javascriptltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpdfltextensiongt ltmime-typegtapplicationpdfltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpngltextensiongt ltmime-typegtimagepngltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongttxtltextensiongt ltmime-typegttextplainltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxlsltextensiongt ltmime-typegtapplicationvndms-excelltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxmlltextensiongt ltmime-typegttextxmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxulltextensiongt ltmime-typegtapplicationvndmozillaxul-xmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzhtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzipltextensiongt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 10 of 30

Troubleshooting

1 Sometimes the user may notice handshake exceptions It is a best

practice to add the following java property to the server startup so that

user may see more information about the handshake

-Djavaxnetdebug=sslhandshake

2 It is also good to add the following trust store and keystore system

properties which can point to the specific file This will help the server

pick the exact ones rather than choose the default store which may vary

from environment to environment jdk to jdk

-DjavaxnetssltrustStore

-DjavaxnetssltrustStorePassword

-DjavaxnetssltrustStoreType

-DjavaxnetsslkeyStore

-DjavaxnetsslkeyStorePassword

The above properties would avoid any kind of trust issues The above

properties are well-documented at

httpdownloadoraclecomjavase6docstechnotesguidessecurityjs

seJSSERefGuidehtmlTroubleshooting

Copyright copy 2011 Active Endpoints Inc Page 11 of 30

About Active Endpoints Active Endpoints (wwwactivevoscom) ActiveVOS is the leader in service-

oriented BPM software for process automation ActiveVOS empowers

project teams to create business process management (BPM)

applications using services making their businesses more agile and

effective ActiveVOS promotes mass adoption of SOA-enabled BPM

applications by focusing on accelerating project delivery time with a

complete affordable and easy-to-use system Active Endpoints is

headquartered in Waltham MA with development facilities in Shelton

CT

To find out how Active Endpoints can help your business visit

httpwwwactivevoscom call +1 781 547 2900 and press 1 for Sales or

email us at infoactivevoscom

Copyright copy 2011 Active Endpoints Inc Page 12 of 30

Appendix A ndash ActiveVOS Centralrsquos webxml WAR File

ltxml version=10 encoding=UTF-8gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance id=WebApp_ID version=24 xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsdgt ltdisplay-namegtWorkFlow Application Console(Active Endpoints Inc)ltdisplay-namegt lt-- Application Name that is display in the UI --gt ltcontext-paramgt ltparam-namegtaeworkflownameltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowinboxcontextpathltparam-namegt ltparam-valuegtinboxltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowavccontextpathltparam-namegt ltparam-valuegtavcltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowskiploginltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowconfigfilenameltparam-namegt ltparam-valuegtaeworkflow-configxmlltparam-valuegt ltcontext-paramgt lt-- String resource bundle --gt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegtorgactivebpelb4pwarwebAeTaskWarBundleltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegtWEB-INFaeworkflowltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NDetectionFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeI18NResourceFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NResourceFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeWorkFlowRequestFilterltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 13 of 30

ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443activevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 14 of 30

lt-- END CAS --gt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcavcjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcindexjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavctasklturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcformviewerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatelturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatepickerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjslayoutlturl-patterngt ltfilter-mappinggt ltlistenergt ltlistener-classgtorgactivebpelb4pwarwebservletAeWorkFlowContextListenerltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeWorkFlowAttachmentDownloadServletltservlet-classgt ltload-on-startupgt50ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet rendering task detail using xslltdisplay-namegt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt

Copyright copy 2011 Active Endpoints Inc Page 15 of 30

ltservlet-classgtorgactivebpelb4pwarxslAeWorkFlowRenderTaskXslServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc task renderings dispatch servlet --gt ltservletgt ltdisplay-namegtTask detail rendering dispatch servletltdisplay-namegt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeTaskRenderingDispatchServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc get form servlet --gt ltservletgt ltdisplay-namegtServlet that returns task or request form htmlltdisplay-namegt ltservlet-namegtAeGetFormServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet that returns form viewerltdisplay-namegt ltservlet-namegtAeGetFormViewerServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormViewerServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- task add attachment servlet --gt ltservletgt ltdisplay-namegtServlet responsible for adding task attachments from ajax formltdisplay-namegt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeAjaxAddTaskAttachmentServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- central proxy servlet --gt ltservletgt ltdisplay-namegtAjax Proxy Servletltdisplay-namegt ltservlet-namegtAjaxProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAjaxProxyServletltservlet-classgt ltservletgt lt-- central localization proxy servlet --gt ltservletgt ltdisplay-namegtCentral Localization Proxy Servletltdisplay-namegt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLocalizationProxyServletltservlet-classgt ltservletgt lt-- reports proxy servlet --gt ltservletgt ltdisplay-namegtReports Proxy Servletltdisplay-namegt ltservlet-namegtReportsProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyServletltservlet-classgt ltservletgt ltservletgt ltdisplay-namegtReports Proxy Cancel Servletltdisplay-namegt ltservlet-namegtReportsProxyCancelServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyCancelServletltservlet-classgt ltservletgt lt-- avc catalog proxy servlet --gt

Copyright copy 2011 Active Endpoints Inc Page 16 of 30

ltservletgt ltdisplay-namegtAVC Catalog Proxy Servletltdisplay-namegt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAvcCatalogProxyServletltservlet-classgt ltservletgt lt-- login checker servlet --gt ltservletgt ltdisplay-namegtLogin Session Check Servletltdisplay-namegt ltservlet-namegtAeLoginCheckServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLoginCheckServletltservlet-classgt ltservletgt lt-- inbox get task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtinboxgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- avc task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtavcgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- All GETs to task detail goes through the dispatcher --gt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtinboxtasklturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtavctasklturl-patterngt ltservlet-mappinggt lt-- Internal servlet that handles XSL rendering --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt lturl-patterngtinboxinternalAeWorkFlowRenderTaskXslServletlturl-patterngt ltservlet-mappinggt lt-- Servlet that returns the html for the task and request forms --gt ltservlet-mappinggt ltservlet-namegtAeGetFormServletltservlet-namegt lturl-patterngtavcformlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeGetFormViewerServletltservlet-namegt lturl-patterngtavcformviewerlturl-patterngt ltservlet-mappinggt lt-- central proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtavcproxylturl-patterngt ltservlet-mappinggt lt-- central localization proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt lturl-patterngti18nlturl-patterngt ltservlet-mappinggt lt-- unsecured proxy --gt

Copyright copy 2011 Active Endpoints Inc Page 17 of 30

ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtproxylturl-patterngt ltservlet-mappinggt lt-- catalog servlet proxy --gt ltservlet-mappinggt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt lturl-patterngtavccataloglturl-patterngt ltservlet-mappinggt lt-- reports proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtReportsProxyCancelServletltservlet-namegt lturl-patterngtavcCancelTaskjsplturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcbirtreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcextractlturl-patterngt ltservlet-mappinggt lt-- Add attachment --gt ltservlet-mappinggt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt lturl-patterngtavcaddTaskAttachmentlturl-patterngt ltservlet-mappinggt lt-- Login checker --gt ltservlet-mappinggt ltservlet-namegtAeLoginCheckServletltservlet-namegt lturl-patterngtloginchecklturl-patterngt ltservlet-mappinggt lt-- JSP_SERVLET_BEGIN ltservlet-mappinggt ltservlet-namegtjspltservlet-namegt lturl-patterngtjspflturl-patterngt ltservlet-mappinggt JSP_SERVLET_END --gt ltsession-configgt lt-- Default to 30 minute session timeouts --gt ltsession-timeoutgt30ltsession-timeoutgt ltsession-configgt lt-- MIME mapping --gt ltmime-mappinggt ltextensiongtcssltextensiongt ltmime-typegttextcssltmime-typegt ltmime-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 18 of 30

ltmime-mappinggt ltextensiongtdocltextensiongt ltmime-typegtapplicationvndms-wordltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtdspltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtgifltextensiongt ltmime-typegtimagegifltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjnlpltextensiongt ltmime-typegtapplicationx-java-jnlp-fileltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpegltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpgltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjsltextensiongt ltmime-typegtapplicationx-javascriptltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpdfltextensiongt ltmime-typegtapplicationpdfltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpngltextensiongt ltmime-typegtimagepngltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongttxtltextensiongt ltmime-typegttextplainltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxlsltextensiongt ltmime-typegtapplicationvndms-excelltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxmlltextensiongt ltmime-typegttextxmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxulltextensiongt ltmime-typegtapplicationvndmozillaxul-xmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzhtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzipltextensiongt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 11 of 30

About Active Endpoints Active Endpoints (wwwactivevoscom) ActiveVOS is the leader in service-

oriented BPM software for process automation ActiveVOS empowers

project teams to create business process management (BPM)

applications using services making their businesses more agile and

effective ActiveVOS promotes mass adoption of SOA-enabled BPM

applications by focusing on accelerating project delivery time with a

complete affordable and easy-to-use system Active Endpoints is

headquartered in Waltham MA with development facilities in Shelton

CT

To find out how Active Endpoints can help your business visit

httpwwwactivevoscom call +1 781 547 2900 and press 1 for Sales or

email us at infoactivevoscom

Copyright copy 2011 Active Endpoints Inc Page 12 of 30

Appendix A ndash ActiveVOS Centralrsquos webxml WAR File

ltxml version=10 encoding=UTF-8gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance id=WebApp_ID version=24 xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsdgt ltdisplay-namegtWorkFlow Application Console(Active Endpoints Inc)ltdisplay-namegt lt-- Application Name that is display in the UI --gt ltcontext-paramgt ltparam-namegtaeworkflownameltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowinboxcontextpathltparam-namegt ltparam-valuegtinboxltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowavccontextpathltparam-namegt ltparam-valuegtavcltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowskiploginltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowconfigfilenameltparam-namegt ltparam-valuegtaeworkflow-configxmlltparam-valuegt ltcontext-paramgt lt-- String resource bundle --gt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegtorgactivebpelb4pwarwebAeTaskWarBundleltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegtWEB-INFaeworkflowltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NDetectionFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeI18NResourceFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NResourceFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeWorkFlowRequestFilterltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 13 of 30

ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443activevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 14 of 30

lt-- END CAS --gt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcavcjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcindexjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavctasklturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcformviewerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatelturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatepickerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjslayoutlturl-patterngt ltfilter-mappinggt ltlistenergt ltlistener-classgtorgactivebpelb4pwarwebservletAeWorkFlowContextListenerltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeWorkFlowAttachmentDownloadServletltservlet-classgt ltload-on-startupgt50ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet rendering task detail using xslltdisplay-namegt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt

Copyright copy 2011 Active Endpoints Inc Page 15 of 30

ltservlet-classgtorgactivebpelb4pwarxslAeWorkFlowRenderTaskXslServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc task renderings dispatch servlet --gt ltservletgt ltdisplay-namegtTask detail rendering dispatch servletltdisplay-namegt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeTaskRenderingDispatchServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc get form servlet --gt ltservletgt ltdisplay-namegtServlet that returns task or request form htmlltdisplay-namegt ltservlet-namegtAeGetFormServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet that returns form viewerltdisplay-namegt ltservlet-namegtAeGetFormViewerServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormViewerServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- task add attachment servlet --gt ltservletgt ltdisplay-namegtServlet responsible for adding task attachments from ajax formltdisplay-namegt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeAjaxAddTaskAttachmentServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- central proxy servlet --gt ltservletgt ltdisplay-namegtAjax Proxy Servletltdisplay-namegt ltservlet-namegtAjaxProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAjaxProxyServletltservlet-classgt ltservletgt lt-- central localization proxy servlet --gt ltservletgt ltdisplay-namegtCentral Localization Proxy Servletltdisplay-namegt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLocalizationProxyServletltservlet-classgt ltservletgt lt-- reports proxy servlet --gt ltservletgt ltdisplay-namegtReports Proxy Servletltdisplay-namegt ltservlet-namegtReportsProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyServletltservlet-classgt ltservletgt ltservletgt ltdisplay-namegtReports Proxy Cancel Servletltdisplay-namegt ltservlet-namegtReportsProxyCancelServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyCancelServletltservlet-classgt ltservletgt lt-- avc catalog proxy servlet --gt

Copyright copy 2011 Active Endpoints Inc Page 16 of 30

ltservletgt ltdisplay-namegtAVC Catalog Proxy Servletltdisplay-namegt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAvcCatalogProxyServletltservlet-classgt ltservletgt lt-- login checker servlet --gt ltservletgt ltdisplay-namegtLogin Session Check Servletltdisplay-namegt ltservlet-namegtAeLoginCheckServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLoginCheckServletltservlet-classgt ltservletgt lt-- inbox get task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtinboxgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- avc task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtavcgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- All GETs to task detail goes through the dispatcher --gt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtinboxtasklturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtavctasklturl-patterngt ltservlet-mappinggt lt-- Internal servlet that handles XSL rendering --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt lturl-patterngtinboxinternalAeWorkFlowRenderTaskXslServletlturl-patterngt ltservlet-mappinggt lt-- Servlet that returns the html for the task and request forms --gt ltservlet-mappinggt ltservlet-namegtAeGetFormServletltservlet-namegt lturl-patterngtavcformlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeGetFormViewerServletltservlet-namegt lturl-patterngtavcformviewerlturl-patterngt ltservlet-mappinggt lt-- central proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtavcproxylturl-patterngt ltservlet-mappinggt lt-- central localization proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt lturl-patterngti18nlturl-patterngt ltservlet-mappinggt lt-- unsecured proxy --gt

Copyright copy 2011 Active Endpoints Inc Page 17 of 30

ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtproxylturl-patterngt ltservlet-mappinggt lt-- catalog servlet proxy --gt ltservlet-mappinggt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt lturl-patterngtavccataloglturl-patterngt ltservlet-mappinggt lt-- reports proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtReportsProxyCancelServletltservlet-namegt lturl-patterngtavcCancelTaskjsplturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcbirtreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcextractlturl-patterngt ltservlet-mappinggt lt-- Add attachment --gt ltservlet-mappinggt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt lturl-patterngtavcaddTaskAttachmentlturl-patterngt ltservlet-mappinggt lt-- Login checker --gt ltservlet-mappinggt ltservlet-namegtAeLoginCheckServletltservlet-namegt lturl-patterngtloginchecklturl-patterngt ltservlet-mappinggt lt-- JSP_SERVLET_BEGIN ltservlet-mappinggt ltservlet-namegtjspltservlet-namegt lturl-patterngtjspflturl-patterngt ltservlet-mappinggt JSP_SERVLET_END --gt ltsession-configgt lt-- Default to 30 minute session timeouts --gt ltsession-timeoutgt30ltsession-timeoutgt ltsession-configgt lt-- MIME mapping --gt ltmime-mappinggt ltextensiongtcssltextensiongt ltmime-typegttextcssltmime-typegt ltmime-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 18 of 30

ltmime-mappinggt ltextensiongtdocltextensiongt ltmime-typegtapplicationvndms-wordltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtdspltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtgifltextensiongt ltmime-typegtimagegifltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjnlpltextensiongt ltmime-typegtapplicationx-java-jnlp-fileltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpegltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpgltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjsltextensiongt ltmime-typegtapplicationx-javascriptltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpdfltextensiongt ltmime-typegtapplicationpdfltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpngltextensiongt ltmime-typegtimagepngltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongttxtltextensiongt ltmime-typegttextplainltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxlsltextensiongt ltmime-typegtapplicationvndms-excelltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxmlltextensiongt ltmime-typegttextxmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxulltextensiongt ltmime-typegtapplicationvndmozillaxul-xmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzhtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzipltextensiongt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 12 of 30

Appendix A ndash ActiveVOS Centralrsquos webxml WAR File

ltxml version=10 encoding=UTF-8gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance id=WebApp_ID version=24 xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsdgt ltdisplay-namegtWorkFlow Application Console(Active Endpoints Inc)ltdisplay-namegt lt-- Application Name that is display in the UI --gt ltcontext-paramgt ltparam-namegtaeworkflownameltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowinboxcontextpathltparam-namegt ltparam-valuegtinboxltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowavccontextpathltparam-namegt ltparam-valuegtavcltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowskiploginltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtaeworkflowconfigfilenameltparam-namegt ltparam-valuegtaeworkflow-configxmlltparam-valuegt ltcontext-paramgt lt-- String resource bundle --gt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegtorgactivebpelb4pwarwebAeTaskWarBundleltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegtWEB-INFaeworkflowltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NDetectionFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeI18NResourceFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeI18NResourceFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt ltfilter-classgtorgactivebpelb4pwarwebservletAeWorkFlowRequestFilterltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 13 of 30

ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443activevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 14 of 30

lt-- END CAS --gt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcavcjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcindexjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavctasklturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcformviewerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatelturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatepickerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjslayoutlturl-patterngt ltfilter-mappinggt ltlistenergt ltlistener-classgtorgactivebpelb4pwarwebservletAeWorkFlowContextListenerltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeWorkFlowAttachmentDownloadServletltservlet-classgt ltload-on-startupgt50ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet rendering task detail using xslltdisplay-namegt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt

Copyright copy 2011 Active Endpoints Inc Page 15 of 30

ltservlet-classgtorgactivebpelb4pwarxslAeWorkFlowRenderTaskXslServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc task renderings dispatch servlet --gt ltservletgt ltdisplay-namegtTask detail rendering dispatch servletltdisplay-namegt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeTaskRenderingDispatchServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc get form servlet --gt ltservletgt ltdisplay-namegtServlet that returns task or request form htmlltdisplay-namegt ltservlet-namegtAeGetFormServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet that returns form viewerltdisplay-namegt ltservlet-namegtAeGetFormViewerServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormViewerServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- task add attachment servlet --gt ltservletgt ltdisplay-namegtServlet responsible for adding task attachments from ajax formltdisplay-namegt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeAjaxAddTaskAttachmentServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- central proxy servlet --gt ltservletgt ltdisplay-namegtAjax Proxy Servletltdisplay-namegt ltservlet-namegtAjaxProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAjaxProxyServletltservlet-classgt ltservletgt lt-- central localization proxy servlet --gt ltservletgt ltdisplay-namegtCentral Localization Proxy Servletltdisplay-namegt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLocalizationProxyServletltservlet-classgt ltservletgt lt-- reports proxy servlet --gt ltservletgt ltdisplay-namegtReports Proxy Servletltdisplay-namegt ltservlet-namegtReportsProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyServletltservlet-classgt ltservletgt ltservletgt ltdisplay-namegtReports Proxy Cancel Servletltdisplay-namegt ltservlet-namegtReportsProxyCancelServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyCancelServletltservlet-classgt ltservletgt lt-- avc catalog proxy servlet --gt

Copyright copy 2011 Active Endpoints Inc Page 16 of 30

ltservletgt ltdisplay-namegtAVC Catalog Proxy Servletltdisplay-namegt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAvcCatalogProxyServletltservlet-classgt ltservletgt lt-- login checker servlet --gt ltservletgt ltdisplay-namegtLogin Session Check Servletltdisplay-namegt ltservlet-namegtAeLoginCheckServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLoginCheckServletltservlet-classgt ltservletgt lt-- inbox get task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtinboxgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- avc task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtavcgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- All GETs to task detail goes through the dispatcher --gt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtinboxtasklturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtavctasklturl-patterngt ltservlet-mappinggt lt-- Internal servlet that handles XSL rendering --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt lturl-patterngtinboxinternalAeWorkFlowRenderTaskXslServletlturl-patterngt ltservlet-mappinggt lt-- Servlet that returns the html for the task and request forms --gt ltservlet-mappinggt ltservlet-namegtAeGetFormServletltservlet-namegt lturl-patterngtavcformlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeGetFormViewerServletltservlet-namegt lturl-patterngtavcformviewerlturl-patterngt ltservlet-mappinggt lt-- central proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtavcproxylturl-patterngt ltservlet-mappinggt lt-- central localization proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt lturl-patterngti18nlturl-patterngt ltservlet-mappinggt lt-- unsecured proxy --gt

Copyright copy 2011 Active Endpoints Inc Page 17 of 30

ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtproxylturl-patterngt ltservlet-mappinggt lt-- catalog servlet proxy --gt ltservlet-mappinggt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt lturl-patterngtavccataloglturl-patterngt ltservlet-mappinggt lt-- reports proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtReportsProxyCancelServletltservlet-namegt lturl-patterngtavcCancelTaskjsplturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcbirtreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcextractlturl-patterngt ltservlet-mappinggt lt-- Add attachment --gt ltservlet-mappinggt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt lturl-patterngtavcaddTaskAttachmentlturl-patterngt ltservlet-mappinggt lt-- Login checker --gt ltservlet-mappinggt ltservlet-namegtAeLoginCheckServletltservlet-namegt lturl-patterngtloginchecklturl-patterngt ltservlet-mappinggt lt-- JSP_SERVLET_BEGIN ltservlet-mappinggt ltservlet-namegtjspltservlet-namegt lturl-patterngtjspflturl-patterngt ltservlet-mappinggt JSP_SERVLET_END --gt ltsession-configgt lt-- Default to 30 minute session timeouts --gt ltsession-timeoutgt30ltsession-timeoutgt ltsession-configgt lt-- MIME mapping --gt ltmime-mappinggt ltextensiongtcssltextensiongt ltmime-typegttextcssltmime-typegt ltmime-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 18 of 30

ltmime-mappinggt ltextensiongtdocltextensiongt ltmime-typegtapplicationvndms-wordltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtdspltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtgifltextensiongt ltmime-typegtimagegifltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjnlpltextensiongt ltmime-typegtapplicationx-java-jnlp-fileltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpegltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpgltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjsltextensiongt ltmime-typegtapplicationx-javascriptltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpdfltextensiongt ltmime-typegtapplicationpdfltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpngltextensiongt ltmime-typegtimagepngltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongttxtltextensiongt ltmime-typegttextplainltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxlsltextensiongt ltmime-typegtapplicationvndms-excelltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxmlltextensiongt ltmime-typegttextxmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxulltextensiongt ltmime-typegtapplicationvndmozillaxul-xmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzhtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzipltextensiongt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 13 of 30

ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpsltHOSTNAMEgt8443activevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevos-centralproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 14 of 30

lt-- END CAS --gt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcavcjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcindexjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavctasklturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcformviewerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatelturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatepickerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjslayoutlturl-patterngt ltfilter-mappinggt ltlistenergt ltlistener-classgtorgactivebpelb4pwarwebservletAeWorkFlowContextListenerltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeWorkFlowAttachmentDownloadServletltservlet-classgt ltload-on-startupgt50ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet rendering task detail using xslltdisplay-namegt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt

Copyright copy 2011 Active Endpoints Inc Page 15 of 30

ltservlet-classgtorgactivebpelb4pwarxslAeWorkFlowRenderTaskXslServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc task renderings dispatch servlet --gt ltservletgt ltdisplay-namegtTask detail rendering dispatch servletltdisplay-namegt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeTaskRenderingDispatchServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc get form servlet --gt ltservletgt ltdisplay-namegtServlet that returns task or request form htmlltdisplay-namegt ltservlet-namegtAeGetFormServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet that returns form viewerltdisplay-namegt ltservlet-namegtAeGetFormViewerServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormViewerServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- task add attachment servlet --gt ltservletgt ltdisplay-namegtServlet responsible for adding task attachments from ajax formltdisplay-namegt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeAjaxAddTaskAttachmentServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- central proxy servlet --gt ltservletgt ltdisplay-namegtAjax Proxy Servletltdisplay-namegt ltservlet-namegtAjaxProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAjaxProxyServletltservlet-classgt ltservletgt lt-- central localization proxy servlet --gt ltservletgt ltdisplay-namegtCentral Localization Proxy Servletltdisplay-namegt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLocalizationProxyServletltservlet-classgt ltservletgt lt-- reports proxy servlet --gt ltservletgt ltdisplay-namegtReports Proxy Servletltdisplay-namegt ltservlet-namegtReportsProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyServletltservlet-classgt ltservletgt ltservletgt ltdisplay-namegtReports Proxy Cancel Servletltdisplay-namegt ltservlet-namegtReportsProxyCancelServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyCancelServletltservlet-classgt ltservletgt lt-- avc catalog proxy servlet --gt

Copyright copy 2011 Active Endpoints Inc Page 16 of 30

ltservletgt ltdisplay-namegtAVC Catalog Proxy Servletltdisplay-namegt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAvcCatalogProxyServletltservlet-classgt ltservletgt lt-- login checker servlet --gt ltservletgt ltdisplay-namegtLogin Session Check Servletltdisplay-namegt ltservlet-namegtAeLoginCheckServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLoginCheckServletltservlet-classgt ltservletgt lt-- inbox get task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtinboxgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- avc task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtavcgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- All GETs to task detail goes through the dispatcher --gt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtinboxtasklturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtavctasklturl-patterngt ltservlet-mappinggt lt-- Internal servlet that handles XSL rendering --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt lturl-patterngtinboxinternalAeWorkFlowRenderTaskXslServletlturl-patterngt ltservlet-mappinggt lt-- Servlet that returns the html for the task and request forms --gt ltservlet-mappinggt ltservlet-namegtAeGetFormServletltservlet-namegt lturl-patterngtavcformlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeGetFormViewerServletltservlet-namegt lturl-patterngtavcformviewerlturl-patterngt ltservlet-mappinggt lt-- central proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtavcproxylturl-patterngt ltservlet-mappinggt lt-- central localization proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt lturl-patterngti18nlturl-patterngt ltservlet-mappinggt lt-- unsecured proxy --gt

Copyright copy 2011 Active Endpoints Inc Page 17 of 30

ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtproxylturl-patterngt ltservlet-mappinggt lt-- catalog servlet proxy --gt ltservlet-mappinggt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt lturl-patterngtavccataloglturl-patterngt ltservlet-mappinggt lt-- reports proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtReportsProxyCancelServletltservlet-namegt lturl-patterngtavcCancelTaskjsplturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcbirtreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcextractlturl-patterngt ltservlet-mappinggt lt-- Add attachment --gt ltservlet-mappinggt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt lturl-patterngtavcaddTaskAttachmentlturl-patterngt ltservlet-mappinggt lt-- Login checker --gt ltservlet-mappinggt ltservlet-namegtAeLoginCheckServletltservlet-namegt lturl-patterngtloginchecklturl-patterngt ltservlet-mappinggt lt-- JSP_SERVLET_BEGIN ltservlet-mappinggt ltservlet-namegtjspltservlet-namegt lturl-patterngtjspflturl-patterngt ltservlet-mappinggt JSP_SERVLET_END --gt ltsession-configgt lt-- Default to 30 minute session timeouts --gt ltsession-timeoutgt30ltsession-timeoutgt ltsession-configgt lt-- MIME mapping --gt ltmime-mappinggt ltextensiongtcssltextensiongt ltmime-typegttextcssltmime-typegt ltmime-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 18 of 30

ltmime-mappinggt ltextensiongtdocltextensiongt ltmime-typegtapplicationvndms-wordltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtdspltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtgifltextensiongt ltmime-typegtimagegifltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjnlpltextensiongt ltmime-typegtapplicationx-java-jnlp-fileltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpegltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpgltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjsltextensiongt ltmime-typegtapplicationx-javascriptltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpdfltextensiongt ltmime-typegtapplicationpdfltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpngltextensiongt ltmime-typegtimagepngltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongttxtltextensiongt ltmime-typegttextplainltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxlsltextensiongt ltmime-typegtapplicationvndms-excelltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxmlltextensiongt ltmime-typegttextxmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxulltextensiongt ltmime-typegtapplicationvndmozillaxul-xmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzhtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzipltextensiongt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 14 of 30

lt-- END CAS --gt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcavcjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcindexjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavctasklturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtavcformviewerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NDetectionFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtinboxlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtavclturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeWorkFlowRequestFilterltfilter-namegt lturl-patterngtloginjsplturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatelturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjsdatepickerlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtAeI18NResourceFilterltfilter-namegt lturl-patterngtavc-resjslayoutlturl-patterngt ltfilter-mappinggt ltlistenergt ltlistener-classgtorgactivebpelb4pwarwebservletAeWorkFlowContextListenerltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeWorkFlowAttachmentDownloadServletltservlet-classgt ltload-on-startupgt50ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet rendering task detail using xslltdisplay-namegt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt

Copyright copy 2011 Active Endpoints Inc Page 15 of 30

ltservlet-classgtorgactivebpelb4pwarxslAeWorkFlowRenderTaskXslServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc task renderings dispatch servlet --gt ltservletgt ltdisplay-namegtTask detail rendering dispatch servletltdisplay-namegt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeTaskRenderingDispatchServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc get form servlet --gt ltservletgt ltdisplay-namegtServlet that returns task or request form htmlltdisplay-namegt ltservlet-namegtAeGetFormServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet that returns form viewerltdisplay-namegt ltservlet-namegtAeGetFormViewerServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormViewerServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- task add attachment servlet --gt ltservletgt ltdisplay-namegtServlet responsible for adding task attachments from ajax formltdisplay-namegt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeAjaxAddTaskAttachmentServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- central proxy servlet --gt ltservletgt ltdisplay-namegtAjax Proxy Servletltdisplay-namegt ltservlet-namegtAjaxProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAjaxProxyServletltservlet-classgt ltservletgt lt-- central localization proxy servlet --gt ltservletgt ltdisplay-namegtCentral Localization Proxy Servletltdisplay-namegt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLocalizationProxyServletltservlet-classgt ltservletgt lt-- reports proxy servlet --gt ltservletgt ltdisplay-namegtReports Proxy Servletltdisplay-namegt ltservlet-namegtReportsProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyServletltservlet-classgt ltservletgt ltservletgt ltdisplay-namegtReports Proxy Cancel Servletltdisplay-namegt ltservlet-namegtReportsProxyCancelServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyCancelServletltservlet-classgt ltservletgt lt-- avc catalog proxy servlet --gt

Copyright copy 2011 Active Endpoints Inc Page 16 of 30

ltservletgt ltdisplay-namegtAVC Catalog Proxy Servletltdisplay-namegt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAvcCatalogProxyServletltservlet-classgt ltservletgt lt-- login checker servlet --gt ltservletgt ltdisplay-namegtLogin Session Check Servletltdisplay-namegt ltservlet-namegtAeLoginCheckServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLoginCheckServletltservlet-classgt ltservletgt lt-- inbox get task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtinboxgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- avc task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtavcgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- All GETs to task detail goes through the dispatcher --gt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtinboxtasklturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtavctasklturl-patterngt ltservlet-mappinggt lt-- Internal servlet that handles XSL rendering --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt lturl-patterngtinboxinternalAeWorkFlowRenderTaskXslServletlturl-patterngt ltservlet-mappinggt lt-- Servlet that returns the html for the task and request forms --gt ltservlet-mappinggt ltservlet-namegtAeGetFormServletltservlet-namegt lturl-patterngtavcformlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeGetFormViewerServletltservlet-namegt lturl-patterngtavcformviewerlturl-patterngt ltservlet-mappinggt lt-- central proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtavcproxylturl-patterngt ltservlet-mappinggt lt-- central localization proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt lturl-patterngti18nlturl-patterngt ltservlet-mappinggt lt-- unsecured proxy --gt

Copyright copy 2011 Active Endpoints Inc Page 17 of 30

ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtproxylturl-patterngt ltservlet-mappinggt lt-- catalog servlet proxy --gt ltservlet-mappinggt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt lturl-patterngtavccataloglturl-patterngt ltservlet-mappinggt lt-- reports proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtReportsProxyCancelServletltservlet-namegt lturl-patterngtavcCancelTaskjsplturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcbirtreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcextractlturl-patterngt ltservlet-mappinggt lt-- Add attachment --gt ltservlet-mappinggt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt lturl-patterngtavcaddTaskAttachmentlturl-patterngt ltservlet-mappinggt lt-- Login checker --gt ltservlet-mappinggt ltservlet-namegtAeLoginCheckServletltservlet-namegt lturl-patterngtloginchecklturl-patterngt ltservlet-mappinggt lt-- JSP_SERVLET_BEGIN ltservlet-mappinggt ltservlet-namegtjspltservlet-namegt lturl-patterngtjspflturl-patterngt ltservlet-mappinggt JSP_SERVLET_END --gt ltsession-configgt lt-- Default to 30 minute session timeouts --gt ltsession-timeoutgt30ltsession-timeoutgt ltsession-configgt lt-- MIME mapping --gt ltmime-mappinggt ltextensiongtcssltextensiongt ltmime-typegttextcssltmime-typegt ltmime-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 18 of 30

ltmime-mappinggt ltextensiongtdocltextensiongt ltmime-typegtapplicationvndms-wordltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtdspltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtgifltextensiongt ltmime-typegtimagegifltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjnlpltextensiongt ltmime-typegtapplicationx-java-jnlp-fileltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpegltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpgltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjsltextensiongt ltmime-typegtapplicationx-javascriptltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpdfltextensiongt ltmime-typegtapplicationpdfltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpngltextensiongt ltmime-typegtimagepngltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongttxtltextensiongt ltmime-typegttextplainltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxlsltextensiongt ltmime-typegtapplicationvndms-excelltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxmlltextensiongt ltmime-typegttextxmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxulltextensiongt ltmime-typegtapplicationvndmozillaxul-xmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzhtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzipltextensiongt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 15 of 30

ltservlet-classgtorgactivebpelb4pwarxslAeWorkFlowRenderTaskXslServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc task renderings dispatch servlet --gt ltservletgt ltdisplay-namegtTask detail rendering dispatch servletltdisplay-namegt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeTaskRenderingDispatchServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- avc get form servlet --gt ltservletgt ltdisplay-namegtServlet that returns task or request form htmlltdisplay-namegt ltservlet-namegtAeGetFormServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet that returns form viewerltdisplay-namegt ltservlet-namegtAeGetFormViewerServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeGetFormViewerServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- task add attachment servlet --gt ltservletgt ltdisplay-namegtServlet responsible for adding task attachments from ajax formltdisplay-namegt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarajaxformAeAjaxAddTaskAttachmentServletltservlet-classgt ltload-on-startupgt10ltload-on-startupgt ltservletgt lt-- central proxy servlet --gt ltservletgt ltdisplay-namegtAjax Proxy Servletltdisplay-namegt ltservlet-namegtAjaxProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAjaxProxyServletltservlet-classgt ltservletgt lt-- central localization proxy servlet --gt ltservletgt ltdisplay-namegtCentral Localization Proxy Servletltdisplay-namegt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLocalizationProxyServletltservlet-classgt ltservletgt lt-- reports proxy servlet --gt ltservletgt ltdisplay-namegtReports Proxy Servletltdisplay-namegt ltservlet-namegtReportsProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyServletltservlet-classgt ltservletgt ltservletgt ltdisplay-namegtReports Proxy Cancel Servletltdisplay-namegt ltservlet-namegtReportsProxyCancelServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeReportsProxyCancelServletltservlet-classgt ltservletgt lt-- avc catalog proxy servlet --gt

Copyright copy 2011 Active Endpoints Inc Page 16 of 30

ltservletgt ltdisplay-namegtAVC Catalog Proxy Servletltdisplay-namegt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAvcCatalogProxyServletltservlet-classgt ltservletgt lt-- login checker servlet --gt ltservletgt ltdisplay-namegtLogin Session Check Servletltdisplay-namegt ltservlet-namegtAeLoginCheckServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLoginCheckServletltservlet-classgt ltservletgt lt-- inbox get task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtinboxgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- avc task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtavcgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- All GETs to task detail goes through the dispatcher --gt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtinboxtasklturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtavctasklturl-patterngt ltservlet-mappinggt lt-- Internal servlet that handles XSL rendering --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt lturl-patterngtinboxinternalAeWorkFlowRenderTaskXslServletlturl-patterngt ltservlet-mappinggt lt-- Servlet that returns the html for the task and request forms --gt ltservlet-mappinggt ltservlet-namegtAeGetFormServletltservlet-namegt lturl-patterngtavcformlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeGetFormViewerServletltservlet-namegt lturl-patterngtavcformviewerlturl-patterngt ltservlet-mappinggt lt-- central proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtavcproxylturl-patterngt ltservlet-mappinggt lt-- central localization proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt lturl-patterngti18nlturl-patterngt ltservlet-mappinggt lt-- unsecured proxy --gt

Copyright copy 2011 Active Endpoints Inc Page 17 of 30

ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtproxylturl-patterngt ltservlet-mappinggt lt-- catalog servlet proxy --gt ltservlet-mappinggt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt lturl-patterngtavccataloglturl-patterngt ltservlet-mappinggt lt-- reports proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtReportsProxyCancelServletltservlet-namegt lturl-patterngtavcCancelTaskjsplturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcbirtreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcextractlturl-patterngt ltservlet-mappinggt lt-- Add attachment --gt ltservlet-mappinggt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt lturl-patterngtavcaddTaskAttachmentlturl-patterngt ltservlet-mappinggt lt-- Login checker --gt ltservlet-mappinggt ltservlet-namegtAeLoginCheckServletltservlet-namegt lturl-patterngtloginchecklturl-patterngt ltservlet-mappinggt lt-- JSP_SERVLET_BEGIN ltservlet-mappinggt ltservlet-namegtjspltservlet-namegt lturl-patterngtjspflturl-patterngt ltservlet-mappinggt JSP_SERVLET_END --gt ltsession-configgt lt-- Default to 30 minute session timeouts --gt ltsession-timeoutgt30ltsession-timeoutgt ltsession-configgt lt-- MIME mapping --gt ltmime-mappinggt ltextensiongtcssltextensiongt ltmime-typegttextcssltmime-typegt ltmime-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 18 of 30

ltmime-mappinggt ltextensiongtdocltextensiongt ltmime-typegtapplicationvndms-wordltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtdspltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtgifltextensiongt ltmime-typegtimagegifltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjnlpltextensiongt ltmime-typegtapplicationx-java-jnlp-fileltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpegltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpgltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjsltextensiongt ltmime-typegtapplicationx-javascriptltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpdfltextensiongt ltmime-typegtapplicationpdfltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpngltextensiongt ltmime-typegtimagepngltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongttxtltextensiongt ltmime-typegttextplainltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxlsltextensiongt ltmime-typegtapplicationvndms-excelltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxmlltextensiongt ltmime-typegttextxmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxulltextensiongt ltmime-typegtapplicationvndmozillaxul-xmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzhtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzipltextensiongt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 16 of 30

ltservletgt ltdisplay-namegtAVC Catalog Proxy Servletltdisplay-namegt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeAvcCatalogProxyServletltservlet-classgt ltservletgt lt-- login checker servlet --gt ltservletgt ltdisplay-namegtLogin Session Check Servletltdisplay-namegt ltservlet-namegtAeLoginCheckServletltservlet-namegt ltservlet-classgtorgactivebpelb4pwarwebservletAeLoginCheckServletltservlet-classgt ltservletgt lt-- inbox get task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtinboxgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- avc task attachment servlet --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowAttachmentDownloadServletltservlet-namegt lturl-patterngtavcgetAttachmentlturl-patterngt ltservlet-mappinggt lt-- All GETs to task detail goes through the dispatcher --gt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtinboxtasklturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeTaskRenderingDispatchServletltservlet-namegt lturl-patterngtavctasklturl-patterngt ltservlet-mappinggt lt-- Internal servlet that handles XSL rendering --gt ltservlet-mappinggt ltservlet-namegtAeWorkFlowRenderTaskXslServletltservlet-namegt lturl-patterngtinboxinternalAeWorkFlowRenderTaskXslServletlturl-patterngt ltservlet-mappinggt lt-- Servlet that returns the html for the task and request forms --gt ltservlet-mappinggt ltservlet-namegtAeGetFormServletltservlet-namegt lturl-patterngtavcformlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeGetFormViewerServletltservlet-namegt lturl-patterngtavcformviewerlturl-patterngt ltservlet-mappinggt lt-- central proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtavcproxylturl-patterngt ltservlet-mappinggt lt-- central localization proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtAeLocalizationProxyServletltservlet-namegt lturl-patterngti18nlturl-patterngt ltservlet-mappinggt lt-- unsecured proxy --gt

Copyright copy 2011 Active Endpoints Inc Page 17 of 30

ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtproxylturl-patterngt ltservlet-mappinggt lt-- catalog servlet proxy --gt ltservlet-mappinggt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt lturl-patterngtavccataloglturl-patterngt ltservlet-mappinggt lt-- reports proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtReportsProxyCancelServletltservlet-namegt lturl-patterngtavcCancelTaskjsplturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcbirtreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcextractlturl-patterngt ltservlet-mappinggt lt-- Add attachment --gt ltservlet-mappinggt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt lturl-patterngtavcaddTaskAttachmentlturl-patterngt ltservlet-mappinggt lt-- Login checker --gt ltservlet-mappinggt ltservlet-namegtAeLoginCheckServletltservlet-namegt lturl-patterngtloginchecklturl-patterngt ltservlet-mappinggt lt-- JSP_SERVLET_BEGIN ltservlet-mappinggt ltservlet-namegtjspltservlet-namegt lturl-patterngtjspflturl-patterngt ltservlet-mappinggt JSP_SERVLET_END --gt ltsession-configgt lt-- Default to 30 minute session timeouts --gt ltsession-timeoutgt30ltsession-timeoutgt ltsession-configgt lt-- MIME mapping --gt ltmime-mappinggt ltextensiongtcssltextensiongt ltmime-typegttextcssltmime-typegt ltmime-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 18 of 30

ltmime-mappinggt ltextensiongtdocltextensiongt ltmime-typegtapplicationvndms-wordltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtdspltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtgifltextensiongt ltmime-typegtimagegifltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjnlpltextensiongt ltmime-typegtapplicationx-java-jnlp-fileltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpegltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpgltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjsltextensiongt ltmime-typegtapplicationx-javascriptltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpdfltextensiongt ltmime-typegtapplicationpdfltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpngltextensiongt ltmime-typegtimagepngltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongttxtltextensiongt ltmime-typegttextplainltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxlsltextensiongt ltmime-typegtapplicationvndms-excelltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxmlltextensiongt ltmime-typegttextxmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxulltextensiongt ltmime-typegtapplicationvndmozillaxul-xmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzhtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzipltextensiongt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 17 of 30

ltservlet-mappinggt ltservlet-namegtAjaxProxyServletltservlet-namegt lturl-patterngtproxylturl-patterngt ltservlet-mappinggt lt-- catalog servlet proxy --gt ltservlet-mappinggt ltservlet-namegtAeAvcCatalogProxyServletltservlet-namegt lturl-patterngtavccataloglturl-patterngt ltservlet-mappinggt lt-- reports proxy servlet mapping --gt ltservlet-mappinggt ltservlet-namegtReportsProxyCancelServletltservlet-namegt lturl-patterngtavcCancelTaskjsplturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcbirtreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtReportsProxyServletltservlet-namegt lturl-patterngtavcextractlturl-patterngt ltservlet-mappinggt lt-- Add attachment --gt ltservlet-mappinggt ltservlet-namegtAeAjaxAddTaskAttachmentServletltservlet-namegt lturl-patterngtavcaddTaskAttachmentlturl-patterngt ltservlet-mappinggt lt-- Login checker --gt ltservlet-mappinggt ltservlet-namegtAeLoginCheckServletltservlet-namegt lturl-patterngtloginchecklturl-patterngt ltservlet-mappinggt lt-- JSP_SERVLET_BEGIN ltservlet-mappinggt ltservlet-namegtjspltservlet-namegt lturl-patterngtjspflturl-patterngt ltservlet-mappinggt JSP_SERVLET_END --gt ltsession-configgt lt-- Default to 30 minute session timeouts --gt ltsession-timeoutgt30ltsession-timeoutgt ltsession-configgt lt-- MIME mapping --gt ltmime-mappinggt ltextensiongtcssltextensiongt ltmime-typegttextcssltmime-typegt ltmime-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 18 of 30

ltmime-mappinggt ltextensiongtdocltextensiongt ltmime-typegtapplicationvndms-wordltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtdspltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtgifltextensiongt ltmime-typegtimagegifltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjnlpltextensiongt ltmime-typegtapplicationx-java-jnlp-fileltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpegltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpgltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjsltextensiongt ltmime-typegtapplicationx-javascriptltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpdfltextensiongt ltmime-typegtapplicationpdfltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpngltextensiongt ltmime-typegtimagepngltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongttxtltextensiongt ltmime-typegttextplainltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxlsltextensiongt ltmime-typegtapplicationvndms-excelltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxmlltextensiongt ltmime-typegttextxmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxulltextensiongt ltmime-typegtapplicationvndmozillaxul-xmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzhtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzipltextensiongt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 18 of 30

ltmime-mappinggt ltextensiongtdocltextensiongt ltmime-typegtapplicationvndms-wordltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtdspltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtgifltextensiongt ltmime-typegtimagegifltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongthtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjnlpltextensiongt ltmime-typegtapplicationx-java-jnlp-fileltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpegltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjpgltextensiongt ltmime-typegtimagejpegltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtjsltextensiongt ltmime-typegtapplicationx-javascriptltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpdfltextensiongt ltmime-typegtapplicationpdfltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtpngltextensiongt ltmime-typegtimagepngltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongttxtltextensiongt ltmime-typegttextplainltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxlsltextensiongt ltmime-typegtapplicationvndms-excelltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxmlltextensiongt ltmime-typegttextxmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtxulltextensiongt ltmime-typegtapplicationvndmozillaxul-xmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzhtmlltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzipltextensiongt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 19 of 30

ltmime-typegtapplicationx-zipltmime-typegt ltmime-mappinggt ltmime-mappinggt ltextensiongtzulltextensiongt ltmime-typegttexthtmlltmime-typegt ltmime-mappinggt ltwelcome-file-list id=WelcomeFileListgt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-filegtindexhtmlltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgtlogindeniedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lt-- Tag lib --gt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtWEB-INFaetagstldlttaglib-locationgt lttaglibgt ltjsp-configgt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 20 of 30

Appendix B ndash ActiveVOS webxml ltxml version=10gt ltweb-app xmlns=httpjavasuncomxmlnsj2ee xmlnsxsi=httpwwww3org2001XMLSchema-instance xsischemaLocation=httpjavasuncomxmlnsj2ee httpjavasuncomxmlnsj2eeweb-app_2_4xsd version=24gt ltdescriptiongt ActiveVOS (TM) Console ltdescriptiongt ltcontext-paramgt ltparam-namegtresource-bundle-classltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeActiveBpelWarBundle ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtbundle-prefixltparam-namegt ltparam-valuegt BpelAdminStandardAdminEnterpriseAdmin ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilescontextTilesContextFactory ltparam-namegt ltparam-valuegt orgapachetilescontextenhancedEnhancedContextFactory ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgapachetilesfactoryTilesContainerFactoryMUTABLE ltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationconfigfilename ltparam-namegt ltparam-valuegtnavigationxmlltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegt orgactivebpelrtbpeladminwarwebmodelAeNavigationfailedconfigfilename ltparam-namegt ltparam-valuegtnavigation_failedxmlltparam-valuegt ltcontext-paramgt lt-- Default locale setting --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOCALEltparam-namegt ltparam-valuegten-USltparam-valuegt ltcontext-paramgt lt--

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 21 of 30

Default timezone setting Examples EuropeParis GMT+1 Defaults to the containers timezone --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_TIMEZONEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Report resources directory for preview Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_WORKING_FOLDERltparam-namegt ltparam-valuegt$javaiotmpdiractivevos-reports-workltparam-valuegt ltcontext-paramgt lt-- The generated document files directory Default to $birt homedocuments --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_DOCUMENT_FOLDERltparam-namegt ltparam-valuegt$birtviewerworkingpathdocumentsltparam-valuegt ltcontext-paramgt lt-- If only access the reprot resources under working folder Default is false --gt ltcontext-paramgt ltparam-namegtWORKING_FOLDER_ACCESS_ONLYltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Output imagechart directory Default to $birt homereportimages --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_IMAGE_DIRltparam-namegt ltparam-valuegt $birtviewerworkingpathreportimages ltparam-valuegt ltcontext-paramgt lt-- Engine log directory Default to $birt homelogs --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_DIRltparam-namegt ltparam-valuegt$birtviewerworkingpathlogsltparam-valuegt ltcontext-paramgt lt-- Report engine log level --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_LOG_LEVELltparam-namegt ltparam-valuegtWARNINGltparam-valuegt ltcontext-paramgt lt-- Directory to store all birt report script libraries (JARs) Default to $birt homescriptlib --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_SCRIPTLIB_DIRltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Resource location directory Default to $birt home --gt ltcontext-paramgt ltparam-namegtBIRT_RESOURCE_PATHltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max rows limited --gt ltcontext-paramgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 22 of 30

ltparam-namegtBIRT_VIEWER_MAX_ROWSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Preview report max cube fetch levels limited(Only support to preview a report design file using preview pattern) --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_ROWLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_MAX_CUBE_COLUMNLEVELSltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- Memory size(MB) for creating cube --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CUBE_MEMORY_SIZEltparam-namegt ltparam-valuegt ltcontext-paramgt lt-- If always overwrite generated document file For runtimeefalult to true --gt ltcontext-paramgt ltparam-namegtBIRT_OVERWRITE_DOCUMENTltparam-namegt ltparam-valuegtfalseltparam-valuegt ltcontext-paramgt lt-- Define BIRT viewer configuration file --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_CONFIG_FILEltparam-namegt ltparam-valuegtWEB-INFviewerpropertiesltparam-valuegt ltcontext-paramgt lt-- If turn on the function that supports print on the server side Default to on --gt ltcontext-paramgt ltparam-namegtBIRT_VIEWER_PRINT_SERVERSIDEltparam-namegt ltparam-valuegtOFFltparam-valuegt ltcontext-paramgt lt-- If force optimized HTML output Default to true --gt ltcontext-paramgt ltparam-namegtHTML_ENABLE_AGENTSTYLE_ENGINEltparam-namegt ltparam-valuegttrueltparam-valuegt ltcontext-paramgt ltfiltergt ltfilter-namegtstruts2ltfilter-namegt ltfilter-classgt orgapachestruts2dispatcherFilterDispatcher ltfilter-classgt ltfiltergt lt-- Central Birt Reporting Filter --gt ltfiltergt ltfilter-namegtCentralReportsFilterltfilter-namegt ltfilter-classgt comactiveeavoscentralservletAeCentralReportsFilter ltfilter-classgt ltfiltergt lt-- BEGIN CAS --gt ltfiltergt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 23 of 30

ltfilter-classgtorgjasigcasclientauthenticationAuthenticationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerLoginUrlltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421loginltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtrenewltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtgatewayltparam-namegt ltparam-valuegtfalseltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Validation_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientvalidationCas20ProxyReceivingTicketValidationFilterltfilter-classgt ltinit-paramgt ltparam-namegtcasServerUrlPrefixltparam-namegt ltparam-valuegthttpslocalhost8443cas-server-webapp-3421ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtserverNameltparam-namegt ltparam-valuegthttpslocalhost8443ltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyCallbackUrlltparam-namegt ltparam-valuegthttpslocalhost8443activevosproxyCallbackltparam-valuegt ltinit-paramgt ltinit-paramgt ltparam-namegtproxyReceptorUrlltparam-namegt ltparam-valuegtactivevosproxyCallbackltparam-valuegt ltinit-paramgt ltfiltergt ltfiltergt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilHttpServletRequestWrapperFilterltfilter-classgt ltfiltergt ltfiltergt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt ltfilter-classgtorgjasigcasclientutilAssertionThreadLocalFilterltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtCAS_Authentication_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_HttpServletRequest_Wrapper_Filterltfilter-namegt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 24 of 30

lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Assertion_Thread_Local_Filterltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCAS_Validation_Filterltfilter-namegt lturl-patterngtproxyCallbacklturl-patterngt ltfilter-mappinggt lt-- END CAS --gt lt-- Birt Viewer FilterCurrently set request character encoding to UTF-8 --gt ltfiltergt ltfilter-namegtViewerFilterltfilter-namegt ltfilter-classgt comactiveertbirtAeBirtViewerFilter ltfilter-classgt ltfiltergt ltfilter-mappinggt ltfilter-namegtstruts2ltfilter-namegt lturl-patterngtlturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtCentralReportsFilterltfilter-namegt lturl-patterngtcentralreportslturl-patterngt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtViewerServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltfilter-mappinggt ltfilter-namegtViewerFilterltfilter-namegt ltservlet-namegtEngineServletltservlet-namegt ltdispatchergtFORWARDltdispatchergt ltdispatchergtINCLUDEltdispatchergt ltdispatchergtREQUESTltdispatchergt ltfilter-mappinggt ltlistenergt ltlistener-classgt orgapachetileswebstartupTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgapachestruts2tilesStrutsTilesListener ltlistener-classgt ltlistenergt ltlistenergt ltlistener-classgt orgactivebpelrtbpeladminwarwebactionsAeActionsContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer Servlet Context Listener --gt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 25 of 30

ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerServletContextListener ltlistener-classgt ltlistenergt lt-- Birt Viewer HttpSession Listener --gt ltlistenergt ltlistener-classgt orgeclipsebirtreportlistenerViewerHttpSessionListener ltlistener-classgt ltlistenergt ltservletgt ltdisplay-namegtServlet for doing a dump of a process logltdisplay-namegt ltservlet-namegtAeProcessLogDumpltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeProcessLogDumpServletltservlet-classgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet for downloading an attachmentltdisplay-namegt ltservlet-namegtAeAttachmentDownloadltservlet-namegt ltservlet-classgtorgactivebpelrtbpeladminwarAeAttachmentDownloadServletltservlet-classgt ltinit-paramgt ltparam-namegthandlerclassltparam-namegt ltparam-valuegt orgactivebpelrtbpeladminwarAeAttachmentDownloadHandler ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt ltservletgt ltdisplay-namegtServlet generating BPEL graph jpeg image contentltdisplay-namegt ltservlet-namegtAeProcessGraphImageltservlet-namegt ltservlet-classgtcomactiveertbpelversioningbpeladminwarwebgraphAeVersionedGraphImageServletltservlet-classgt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphlogopath ltparam-namegt ltparam-valuegt comactiveertclusterbpeladminwarwebgraphbpelicons ltparam-valuegt ltinit-paramgt lt-- Enable or Disable graphing module --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphenable ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Graph module buffered image color depth 8 or 16 (bits) 16-bit depth uses more memory (make sure JVM max heap size is large enough) --gt ltinit-paramgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 26 of 30

ltparam-namegt orgactivebpelrtbpeladminwargraphimagecolordepth ltparam-namegt ltparam-valuegt16ltparam-valuegt ltinit-paramgt lt-- Use large icons --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphiconslarge ltparam-namegt ltparam-valuegttrueltparam-valuegt ltinit-paramgt lt-- Limit Memory to be used for a process image --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagemaxmemory ltparam-namegt ltparam-valuegt0ltparam-valuegt ltinit-paramgt lt-- Graph image tile size in pixels Default is 1000 --gt ltinit-paramgt ltparam-namegt orgactivebpelrtbpeladminwargraphimagetilesize ltparam-namegt ltparam-valuegt1000ltparam-valuegt ltinit-paramgt ltload-on-startupgt100ltload-on-startupgt ltservletgt lt-- Load the Tiles servlet at startup --gt lt-- The Tiles servlet is just a startup servlet and it does not serve any request --gt lt-- Therefore a mapping is not needed --gt ltservletgt ltservlet-namegttilesltservlet-namegt ltservlet-classgt orgapachetileswebstartupTilesServlet ltservlet-classgt ltinit-paramgt ltparam-namegtdefinitions-configltparam-namegt ltparam-valuegtWEB-INFtiles-defsxmlltparam-valuegt ltinit-paramgt ltload-on-startupgt2ltload-on-startupgt ltservletgt ltservletgt ltservlet-namegtTiles Dispatch Servletltservlet-namegt ltservlet-classgt orgapachetileswebutilTilesDispatchServlet ltservlet-classgt ltservletgt lt-- Birt Viewer Servlet Support SOAP --gt ltservletgt ltservlet-namegtViewerServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtViewerServlet ltservlet-classgt ltservletgt lt-- Birt Engine Serlvet --gt ltservletgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 27 of 30

ltservlet-namegtEngineServletltservlet-namegt ltservlet-classgt comactiveertbirtAeBirtEngineServlet ltservlet-classgt ltservletgt lt-- Birt Reporting Servlet --gt ltservletgt ltservlet-namegtInternalReportsServletltservlet-namegt ltservlet-classgt comactiveertclusterbpeladminwarservletAeInternalReportsServlet ltservlet-classgt ltservletgt ltservlet-mappinggt ltservlet-namegtInternalReportsServletltservlet-namegt lturl-patterngtinternalreportslturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessLogDumpltservlet-namegt lturl-patterngtgetLoglturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeAttachmentDownloadltservlet-namegt lturl-patterngtgetAttachmentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtAeProcessGraphImageltservlet-namegt lturl-patterngtprocessviewgraphimagelturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtTiles Dispatch Servletltservlet-namegt lturl-patterngttileslturl-patterngt ltservlet-mappinggt lt-- Birt mappings --gt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtframesetlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtViewerServletltservlet-namegt lturl-patterngtrunlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtpreviewlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdownloadlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtparameterlturl-patterngt ltservlet-mappinggt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 28 of 30

ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtdocumentlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtoutputlturl-patterngt ltservlet-mappinggt ltservlet-mappinggt ltservlet-namegtEngineServletltservlet-namegt lturl-patterngtextractlturl-patterngt ltservlet-mappinggt ltwelcome-file-listgt ltwelcome-filegtwelcomejspltwelcome-filegt ltwelcome-filegtindexjspltwelcome-filegt ltwelcome-file-listgt lt-- === Error pages === --gt lterror-pagegt lterror-codegt400lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt403lterror-codegt ltlocationgterrorsunauthorizedjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt404lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt lterror-codegt500lterror-codegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt lterror-pagegt ltexception-typegtjavalangThrowableltexception-typegt ltlocationgterrorserrorjspltlocationgt lterror-pagegt ltjsp-configgt lttaglibgt lttaglib-urigthttpactivebpelorgaetagliblttaglib-urigt lttaglib-locationgtMETA-INFaetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigthttpactive-endpointscomenterprise-aetagliblttaglib-urigt lttaglib-locationgtMETA-INFenterprise-aetagstldlttaglib-locationgt lttaglibgt lttaglibgt lttaglib-urigtbirttldlttaglib-urigt lttaglib-locationgtMETA-INFbirttldlttaglib-locationgt lttaglibgt ltjsp-configgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin consoleltweb-resource-namegt ltdescriptiongtSecure access to all of the admin console pagesltdescriptiongt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 29 of 30

lturl-patterngtlturl-patterngt ltweb-resource-collectiongt lt--ADMIN-JSP Uncomment to restrict access to the admin JSP and related functionality --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtBPR deployment pageltweb-resource-namegt ltdescriptiongtSecure access to the deployment pages separately to allow deployer to get inltdescriptiongt lturl-patterngthomeactionlturl-patterngt lturl-patterngthomejsplturl-patterngt lturl-patterngtajax_deploy_new_resourceactionlturl-patterngt lturl-patterngtajax_deploy_new_resourcejsplturl-patterngt lturl-patterngtadmin_landingactionlturl-patterngt lturl-patterngtadmin_landingjsplturl-patterngt lturl-patterngtcatalog_landingactionlturl-patterngt lturl-patterngtcatalog_landingjsplturl-patterngt lturl-patterngtdeployed_processesactionlturl-patterngt lturl-patterngtdeployed_processesjsplturl-patterngt lturl-patterngtdeployed_servicesactionlturl-patterngt lturl-patterngtdeployed_servicesjsplturl-patterngt lturl-patterngtdeployment_log_listingactionlturl-patterngt lturl-patterngtdeployment_log_listingjsplturl-patterngt lturl-patterngtserver_loggingactionlturl-patterngt lturl-patterngtserver_loggingjsplturl-patterngt lturl-patterngtdeployment_log_detailactionlturl-patterngt lturl-patterngtdeployment_log_detailjsplturl-patterngt lturl-patterngtmonitor_landingactionlturl-patterngt lturl-patterngtmonitor_landingjsplturl-patterngt lturl-patterngtserver_statusactionlturl-patterngt lturl-patterngtserver_statusjsplturl-patterngt lturl-patterngturn_mappingsactionlturl-patterngt lturl-patterngturn_mappingsjsplturl-patterngt lturl-patterngtfunction_contextsactionlturl-patterngt lturl-patterngtfunction_contextsjsplturl-patterngt lturl-patterngtschedulingactionlturl-patterngt lturl-patterngtschedulingjsplturl-patterngt lturl-patterngtscriptlturl-patterngt ltweb-resource-collectiongt lt--DEPLOY-JSP Uncomment to restrict access to the deployment JSP --gt lt-- ltauth-constraintgt ltrole-namegtabAdminltrole-namegt ltrole-namegtabDeployerltrole-namegt ltauth-constraintgt --gt ltsecurity-constraintgt lt-- Explicitly include patterns that should never be secured here --gt ltsecurity-constraintgt ltweb-resource-collectiongt ltweb-resource-namegtActiveBPEL Admin console Unsecured resourcesltweb-resource-namegt ltdescriptiongtAllows unrestricted access to the following resources overriding any previous settingsltdescriptiongt lturl-patterngtlturl-patterngt lturl-patterngtscriptjqlturl-patterngt lturl-patterngtcsslturl-patterngt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt

Copyright copy 2011 Active Endpoints Inc Page 30 of 30

lturl-patterngtimageslturl-patterngt lturl-patterngtfaviconicolturl-patterngt lturl-patterngtlogoutactionlturl-patterngt lturl-patterngtlogoutjsplturl-patterngt lturl-patterngtwelcomeactionlturl-patterngt lturl-patterngtwelcomejsplturl-patterngt lturl-patterngterrorslturl-patterngt lturl-patterngthelplturl-patterngt lturl-patterngtinternalreportslturl-patterngt lturl-patterngtcentralreportslturl-patterngt lturl-patterngtbad_reportjsplturl-patterngt lturl-patterngtwebcontentlturl-patterngt lturl-patterngtpreviewlturl-patterngt ltweb-resource-collectiongt ltsecurity-constraintgt lt-- Set up form-based authentication --gt ltlogin-configgt ltauth-methodgtFORMltauth-methodgt ltrealm-namegtActiveVOS security realmltrealm-namegt ltform-login-configgt ltform-login-pagegtloginjspltform-login-pagegt ltform-error-pagegtloginjsperror=yltform-error-pagegt ltform-login-configgt ltlogin-configgt ltsecurity-rolegt ltdescriptiongt The admin role has access to all areas of the application ltdescriptiongt ltrole-namegtabAdminltrole-namegt ltsecurity-rolegt ltsecurity-rolegt ltdescriptiongt This role is limited to deploying new BPR files ltdescriptiongt ltrole-namegtabDeployerltrole-namegt ltsecurity-rolegt ltweb-appgt