OS/2 Shareware BBS: 35 Internet/35-Internet.zip/srev13g.zip/init_sta.a80

Text File | 1999-04-13 | 15KB | 370 lines

/*     ---------- Static, user Changeable Parameters for srefiltr.80  -------------
       As of sre-http ver 1.3d, sre-http uses a seperate
       file for these "static" parameters -- these values are read ONLY
       when goserve/sre first start.

       In contrast, "dynamic" parameters in INITFILT.80 are monitored -- they can be
       changed without restarting goserve/sre.

      Note: this file is read at GoServe/SRE startup, and then "INTERPRETed".
            It MUST contain valid REXX code -- with comments between / *     * / (no
            spaces between the asterisk and the slash).

Variable list:

  always_check_privs:  Flag to "check client privileges even if it's a public url"
  BackupServerList: ip addresses of servers to distribute to under load
  cgi_bin_pieces: Send pieces of CGI-BIN output as they become available
  cgi_post_long_get: Convert long GET requests to POST requests
  custom_inits: Comma delimited list of "custom initialization procedures"
  default_enryption: the default encryption method
  digest_auth: Ask for "digest" authorization
  dir_cache_size: size of the directory-listing cache
  dir_cache_duration: lifespan of entries in the directory-listing cache
  delay_seconds: time delay for SRE-http to check parameter files for changes
  empty_path_ok: CGI-BIN control; what to do if no path_info recieved
  enable_encryption: enable sre-http encryption
  get_decode_options: Enable URL-decoding of options of GET requests
  hit_superuser_suppress: modify HIT_OWNER_SUPPRESS to check for SUPERUSERS
  ncsa_ismap: substring(s) that signals "this is an NCSA mappable image request"
  cern_ismap: substring(s) that signals "this is a CERN mappable image request"
  head_to_get: tell addons that HEAD requests are GET
  key_preface: optional preface for server side include keywords
  logon_limit:  maximum # of attempts, per minute per client
  LoadThreshold: Used with BACKUPSERVERLIST (load at which transfer occurs)
  main_server: An IP address for a "main server"
  message_scramble: used by messages boxes to encode passwords and nonces
  never_imagemaps: suppess check if this is an imagemap
  never_publicurls: suppress checking for publicurls
  no_remote_config: Suppress remote configuration
  no_no_record: Suppress the !NORECORD directive
  pmprintf_opt: Output type for SRE-http's audit file
  pre_reply_procedure: a "last-second" hook into sre
  put_no_overwrite: Allow PUT method requests to overwrite existing files
  proxy_cache: Allow proxy (and sreproxy)caching
  quick_interp: Shorthand for INTERPRET FILE
  quick_interp_code: Shorthand for INTERPRET CODE
  quick_replace: Shorthand for REPLACE
  range_at_end: Check for range info at end of request string
  realm_1st_priv: If need be, use first resource privilege as the realm
  record_cache_lines: Size of RECORD_ALL_FILE cache
  sem_maxwait: waiting time till threads check their queue
  ssi_extensions: extensions for which the ssi_shtml_only parameter applies
  ssi_cache_size: size of the ssi-cache
  ssi_cache_duration: lifespan of entries in the ssi-cache
  ssi_cache_stamp: Type of "trigger" check (used with ssi-cache)
  suppress_gzip_te: Suppress on-the-fly gzip
  user_logon_proc: Name of an alternate "user logon procedure"
  wild_sels_ok: Use * in selectors to find best matching file

  See INITFILT.DOC for a discussion of what these do.

  Note: The essential difference between parameters here, and in INITFILT.80,
        is that these are updated ONLY when GoServe is re-started.
        In contrast, INITFILT.80 parameters are checked (and possibly updated)
        every "delay_seconds" (default value is 15) seconds.

        The notion is that these are more fundamental paramters, which
        will need modification less frequently then INITFILT.80 parameters.

                           ------------------                              */

/*BEGIN  ---  (this line is used by the EDITSREF.CMD SRE-http utility)*/

/* Set to 1 if you want to check for privileges
       (using inhouseips, owner, additional privileges,
       and authorization stuff)
      when the request string matches a public_URL
   Set to 0 to NOT check for these privs.
   This may "unnecessarily slow things down", but may be
   required if further privilege checks are
   done by SRE-http addons */
always_check_privs=1

/* This space delimited list contains ip addresses of backup servers
  It's used in conjunction with LOADTHRESHOLD (it's ignored if
  loadthreshold=0 */
BackupServerList = 'www2.hursley.ibm.com  '

/* Set to 1 or if you want SRE-http to send "pieces" of
   CGI-BIN output as they become available.
      0-- send all the output (wait until script finishes)
    1 or  2-- filerexx mode
   Note that !CGI-BIN_n (n=2,3,4, or 5) will over ride this. */
cgi_bin_pieces=0

/* To  work around this environment and command line argument size limits
   SRE-http can convert long GET requests into POST requests.
   To do this, set CGI_POST_LONG_GET=nnnn, where nnnn is a maxium
   tolerable size (i.e.; nnnn=1000).
   Note that 0 means "never convert", and 1 means "245" */
cgi_Post_long_get=1000

/* A comma delimited list of custom (i.e.; user written) initialization
   procedures.  These will be called ONLY when goserve/SRE-http starts.
   Each entry in this list should point to an "external REXX procedure";
   you can include a (non-comma containing) argument list after the
   procedure name.
   If you do NOT wish to run any custom initialization procedures, set
   this to blank (or to 0) */
custom_inits=0


/* the default encryption method (used with !ENCRYPT/SELECTOR or
   with SET ENCRYPT (in an advanced-options file).
   Two methods are provided with sre-http:SRE_A and SRE_B. If
   you set DEFAULT_ENCRYPTION='' or =0, then SRE_A is used */
default_encryption='SRE_A'


/* SEt to 1 to also send a WWW-Authenticate: Digest ....
   (as well as the older WWW-Authenticate: Basic .... )
   on authorization request (0=just send Basic) */
digest_auth=1

/* Set the "duration" of entries (in days) for entries in the
  !DIR (directory)  cache. */
dir_cache_duration=3

/* Set the maximum size (in Kbytes) of the directory-listing-cache.
  This is used by the !dir facility of SRE-http */
dir_cache_size=1000

/* Delay_seconds controls how frequently SRE-http
   checks input files for updates.
   Larger values mean more time between checks. */
delay_seconds=15

/* Empty_path_ok is a CGI-BIN option: it controls the
   value of path_info (and path_translated)
   when no "path information" is sent with the cgi-bin request.
     If =1, set path_info (and path_translated)=''
           (the ICS et al standard)
     If =0, use / (and data_directory) (the GOHTTP standard
   Note that !CGI-BIN_1 and !CGI-BIN_0 over ride this. */
empty_path_ok=1


/* Enable SRE-http encryption:
  0 : disable
  1 : enable for  non-addon responses
  2 : enable for all responses
  3 : force encryption of ALL response */
enable_encryption=2

/* Enable "url decoding" of options included in a GET request.
   When a GET request contains "options" (after a ?), SRE-http
   can URL-decode the options list -- converting + into spaces,
   and & into &, etc.
   This list is sent to SRE-http addons.  URL decoding can save
   the addon a few processing steps; but can cause troubles when
   & = and other such characters may be included in the "list of options".
   To enable: get_decode_options=1
              get_decode_options=0 will suppress this decoding */
get_decode_options=1

/* tell addons that HEAD methods are VERB methods. Some older addons
 don't recognize HEADs (note that on HEAD requests goserve never sends
 the body of a response, even if one is produced.
 To enable this,  set head_to_get=1 */
head_to_get=0

/* Controls whether HIT_OWNER_SUPPRESS also applies to SUPERUSERS.
   If 1, then it does.  If 0, then it does not.
   Note: if HIT_OWNER_SUPPRESS is not enabled, then
         hit_superuser_suppress is ignored */
hit_superuser_suppress=1

/* Indicators for "mappable image" requests:
   NSCA  style .MAP files*/
ncsa_ismap='mapimage/ mapnsca/ cgi-bin/mapimage '

/* Indicators for "mappable image" requests:
    CERN style .MAP files*/
cern_ismap='mapcern/ cgi-bin/htimage/'

/* If non-zero, modifies the REPLACE keywords
   Note: key_preface="#" is NOT allowed! */
key_preface=0


/*  Allow this many simultaneous connections before
    attempting load balancing.
    It's used in conjunction with BACKUPSERVERLIST
    Note: 0 means "do not perform load balancing
          To load balance ALL requests (say, with a
          custom load balancer addon, set loadthreshold=0.5 */
LoadThreshold =0

/* Sets the maximum number of unsuccessful "logon" attempts,
   per minute per ip address.
   Set to 0 for "unlimited" attempts.
   Note that a value of 1 may cause problems. */
logon_limit=0

/* The numeric IP address of a "main server".  Certain HEAD requests from
   this main server are expedited (i.e.;!PING). This is currently used to
   implement dynamic load balancing.
    Set MAIN_SERVER=0 to suppress,
    set MAIN_SERVER='' to use "own IP address" */
main_server=' '


/* This is used to "encrypt" domessage passwords, and when creating
nonces.  change it for a wee bit extra security */
message_scramble=12415

/* Set to 1 to suppress SRE-http from checking if a request is an imagemap
   request. Use this ONLY IF YOU NEVER USE SERVER SIDE IMAGEMAPS
   (using it will save a fraction of a second on some requests) */
never_imagemaps=0

/* Set to 1 to suppress SRE-http from checking  for public_urls;
   use it only if you never use public_urls
   (setting never_publicurls=1 will save a fraction of a second on some requests) */
never_publicurls=0

/* If you want to suppress the use of the !NORECORD directive,
   set NO_NO_RECORD=1 */
no_no_record=0

/* This enables/disables SRE-http's remote configurator
  (using the various HTML FORMS).
   0 = Allow remote configuration (for clients with a
       SUPERUSER privilege)
   1 = Allow configuration ONLY form the server's IP address
   2 = Do NOT allow remote configuration
 Note: option 0 can be overridden in the various *CFG.CMD files */
NO_REMOTE_CONFIG=0


/* Type of SRE-http auditing:
  pmprintf_OPT= 1 : Use PMPRINTF window
                    2 : PMPRINTF window and srehttp.log file
                    3:  srehttp.log only
  Note: use VERBOSE (in INITFILT.80) to control the
        extent of "SRE-http auditing" */
pmprintf_opt=1


/* Name of a procedure to call just before sending response to a client.
   This procdedure can be used to modify the response.
   It should equal 0 (to NOT call a "pre-reply" procedure), or
   it should be a fully qualfied filename (of an external rexx procedure) */
pre_reply_procedure=0

/* Allow PUT method requests to overwrite pre-existing files
   (on your server).
   Set to 1 to NOT ALLOW overwriting, 0 to allow */
put_no_overwrite=1

/* Allow proxies (and/or sreproxy) to cache the url
   0=disallow
   1= allow
   2= allow, but force revalidation by all caches
   3= allow, but force revaliation by shared (proxy) caches
for all values but 0, sreproxy will cache (given that sreproxy is being used)*/
proxy_cache=1

/* Short hand character to use instead of INTERPRET FILE
  in server side include keyphrases.
   (do NOT use comma character)
   For example,        use  <!-- $ DIRINFO.RXX -->
                instead of  <!-- INTERPRET FILE DIRINFO.RXX -- > */
quick_interp='$'

/* Short hand character to use instead of INTERPRET CODE
   in server side include keyphrases.
   (do NOT use comma character)
   For example,  use  <!-- # t=time() ; say " Time is " t -->
                 use  <!-- INTERPRET CODE t=time() ; say " Time is " t --> */
quick_interp_Code='#'

/* Short hand character to use instead of REPLACE
   in server side include keyphrases.
   (do NOT use comma character)
   For example,        use  <!-- # PHRASE1 hello+kids -->
                instead of  <!-- REPLACE PHRASE1 HELLO+KIDS -- > */
quick_replace='%'


/* Check for range information at the end of a request
   string (after a ;). This supplements the !RANGE
   syntax.
      0 = Do NOT look for this info
      1 = Do look
*/
range_at_end=0

/* If the allow_access file does not specify a realm,
   then use the first resoruce privilege as the realm.
   1=Yes, 0=no; if 0, then use the default_realm */
realm_1st_priv=0

/* This sets the size (in entries_ of the "recordall_file"
  cache. If you do NOT want to cache the recordall_File,
  set this to 0
  Enabling caching (by using non-0 values0 speeds up
  throughput, but risks minor errors in counts) */
record_cache_lines=0


/* Controls "wait on queue" maximum time delay (in milli seconds) */
sem_maxwait=15000

/* the list of "SSI capable" extensions (used if SSI_SHTML_ONLY='YES') */
ssi_extensions=' SHT SHTML HTML-SSI HTM-SSI '

/* Set the size of the server-side-include (SSI)
   cache, in kilobytes.
  Once cached files (saved to disk) exceed this amount,
  older entries will be deleted.
  A value of 0 means "do NOT cache".
  Example: 1000 means  1M. */
ssi_cache_size=5000

/* Set the "lifespan" of ssi-cache entries, in days
  (fractional values are allowed).  SSI-cache entries
   older then this will be deleted */
ssi_cache_duration=1

/* Set the "type" of trigger checking of ssi-cache
   entries. You can the time (TIME), the date (DATE),
    the time and date (TIMEDATE), the size (SIZE),
    or all 3 (ALL). */
ssi_CACHE_stamp='ALL'


/* Suppress on-the-fly GZIPping of files.
   If =0, then a TE: gzip  request header will cause SRE-http to gzip (and chunk)
           responses
   If =1, then a TE: gzip request header is ignored */
suppress_gzip_te=0

/* Name of an external procedure to use instead of
   SRE-http's builtin "username" lookup procedure.
   Leave blank to use SRE-http's */
user_logon_proc=' '

/* Flag to tell SRE to use * as wildcards in the action
   portion of GET requests.
   If =1, then use best wildcard match in directory
   If =11, then display one match, or dir of multiple
            matches in directory
   If =2, then use best in directory and subdirectories
   If =22, then display one match, or dir of multiple
           matches in directory and subdirectories
   If =0, then DO not search (* in sel will cause a
          notfound response)
   CAUTION: use of this MIGHT subvert access controls */
wild_sels_ok=11


/* pre initialization value of verbose == used when sre starts */
verbose=1


/*END  ---  (this line is used by the EDITSREF.CMD utility)*/