Internal JDBC User Store Configuration

Following is the configuration for the internal JDBC user store. It reads/writes into the default database of the carbon server if JDBCUserStoreManager is enabled in user-mgt.xml.

<UserManager>

<Realm>

.........................

<UserStoreManager

class="org.wso2.carbon.user.core.jdbc.JDBCUserStoreManager">

<Property name="ReadOnly">false</Property>

<Property name="MaxUserNameListLength">100</Property>

<Property name="IsEmailUserName">false</Property>

<Property name="DomainCalculation">default</Property>

<Property name="PasswordDigest">SHA-256</Property>

<Property name="StoreSaltedPassword">true</Property>

<Property name="UserNameUniqueAcrossTenants">false</Property>

<Property name="PasswordJavaRegEx">[\S]{5,30}$</Property>

<Property name="PasswordJavaScriptRegEx">[\\S]{5,30}</Property>

<Property name="UsernameJavaRegEx">^[^~!@#$;%^*+={}\\|\\\\<>]{3,30}$</Property>

<Property name="UsernameJavaScriptRegEx">[\\S]{3,30}</Property>

<Property name="RolenameJavaRegEx">^[^~!@#$;%^*+={}\\|\\\\<>]{3,30}$</Property>

<Property name="RolenameJavaScriptRegEx">[\\S]{3,30}</Property>

</UserStoreManager>

<AuthorizationManager

class="org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager">

</AuthorizationManager>

</Realm>

</UserManager>

Above configuration can be described as follows:

Property Name	Description
`ReadOnly`	Indicates whether the user store of this realm operates in the user read-only mode.
`MaxUserNameListLength`	Maximum number of users retrieved at once by user realm.
`IsEmailUserName`	Indicates whether email is used as user name (applies when realm operates in read-only mode).
`DomainCalculation`	Can be either default or custom (applies when realm operates in read-only mode).
`PasswordDigest`	Digesting method of the password.
`StoreSaltedPassword`	Indicates whether to salt the password.
`UserNameUniqueAcrossTenants`	An attribute used in for multitenancy.
`PasswordJavaRegEx`	Policy defines password format.
`PasswordJavaScriptRegEx`	Policy defines password format.
`UsernameJavaRegEx`	Policy defines user name format.
`UsernameJavaScriptRegEx`	Policy defines user name format.
`RolenameJavaRegEx`	Policy defines role name format.
`RolenameJavaScriptRegEx`	Policy defines role name format.