50 | | The {{{[access]}}} section contains most of the plug-in configuration information. |
| 50 | The {{{[access]}}} section contains most of the plug-in configuration information. Field by field: |
| 51 | |
| 52 | '''project_priority: false''':: |
| 53 | This means that if two [FeddAbout#GlobalIdentifiers:Three-levelNames three level names] match for the current request, give priority to the user match rather than the project match. Practically this has little effect on the skeleton. |
| 54 | '''log_level: debug''':: |
| 55 | Log messages at or above log.DEBUG level will be printed to stderr or a log file. |
| 56 | '''access_state: %(base)s/skel_access.state''':: |
| 57 | The persistent state of the plug-in will be stored in this file (skel_access.state in the base directory). The plug-in will create this file if it is not there and state needs to be stored. |
| 58 | '''accessdb: %(base)s/skel_access''':: |
| 59 | The access database is in skel_access in the base directory. We will discuss the contents of that file below. |
| 60 | '''certdir: %(base)s/certs''':: |
| 61 | This directory is used to store transient certificates. It should be readable only by the federation user. |
| 62 | '''userconfdir: %(base)s/userconf''':: |
| 63 | Used to store information about exported user configurations. Again, it should be readable only by the federation user. |
| 64 | '''maxint: 3''':: |
| 65 | The maximum integer that the skeleton will allocate is 3. This is not inclusive, so the skeleton will actually allocate from {0,1,2,}. |
| 66 | |
| 67 | A line of the form '''create_debug: true''' is commented out. When true, that parameter generally means that the plug-in will not make allocations when requests come in. Because the skeleton only manipulates its internal state, the parameter is not used. |
| 68 | |
| 69 | There are other common attributes in this section that are left as defaults in the example file, and [FeddConfig#AccessOptions defined elsewhere]. |
| 70 | |
| 71 | === [globals] === |
| 72 | |
| 73 | The two or three parameters in this section control overall operation of the plug-in, specifically what prinicpal ID (that is which [FeddAbout#GlobalIdentifiers:Fedids fedid]) it uses and what TCP port it provides services on. '''cert_file''' and '''cert_pwd''' select the X.509 certificate and encyrption password, if any, used to identify the plug-in. The '''services''' parameter controls which ports and transports are used. The sample file serves SOAP traffic on port 13230. [FeddConfig#GlobalOptions Other choices] are possible. |
| 74 | |
| 75 | |
| 76 | |
| 77 | |
| 78 | |