#include <XrdSecProtocolgsi.hh>

Collaboration diagram for gsiOptions:

Public Member Functions
	gsiOptions ()

virtual	~gsiOptions ()

void	Print (XrdOucTrace *t)

Public Attributes
int	authzcall

char *	authzfun

char *	authzfunparms

int	authzpxy

int	authzto

int	bits

int	ca

char *	cert

char *	certdir

char *	cipher

char *	clist

int	createpxy

int	crl

char *	crldir

char *	crlext

int	crlrefresh

short	debug

int	deplen

int	dlgpxy

char *	exppxy

char *	gmapfun

char *	gmapfunparms

int	gmapto

char *	gridmap

int	hashcomp

char *	key

char *	md

char	mode

int	moninfo

int	ogmap

char *	proxy

bool	showDN

int	sigpxy

char *	srvnames

bool	trustdns

char *	valid

int	vomsat

char *	vomsfun

char *	vomsfunparms

Detailed Description

Definition at line 176 of file XrdSecProtocolgsi.hh.

Constructor & Destructor Documentation

◆ gsiOptions()

gsiOptions::gsiOptions ( )

inline

Definition at line 223 of file XrdSecProtocolgsi.hh.

                 { debug = -1; mode = 's'; clist = 0; 
                   certdir = 0; crldir = 0; crlext = 0; cert = 0; key = 0;
                   cipher = 0; md = 0; ca = 1 ; crl = 1; crlrefresh = 86400;
                   proxy = 0; valid = 0; deplen = 0; bits = XrdCryptoDefRSABits;
                   gridmap = 0; gmapto = 600;
                   gmapfun = 0; gmapfunparms = 0; authzfun = 0; authzfunparms = 0;
                   authzto = -1; authzcall = 1;
                   ogmap = 1; dlgpxy = 0; sigpxy = 1; srvnames = 0;
                   exppxy = 0; authzpxy = 0;
                   vomsat = 1; vomsfun = 0; vomsfunparms = 0; moninfo = 0;
                   hashcomp = 1; trustdns = true; showDN = false; createpxy = 1;}

References authzcall, authzfun, authzfunparms, authzpxy, authzto, bits, ca, cert, certdir, cipher, clist, createpxy, crl, crldir, crlext, crlrefresh, debug, deplen, dlgpxy, exppxy, gmapfun, gmapfunparms, gmapto, gridmap, hashcomp, key, md, mode, moninfo, ogmap, proxy, showDN, sigpxy, srvnames, trustdns, valid, vomsat, vomsfun, vomsfunparms, and XrdCryptoDefRSABits.

◆ ~gsiOptions()

virtual gsiOptions::~gsiOptions ( )

inlinevirtual

Definition at line 234 of file XrdSecProtocolgsi.hh.

234 { } // Cleanup inside XrdSecProtocolgsiInit

Member Function Documentation

◆ Print()

void gsiOptions::Print ( XrdOucTrace * t )

Definition at line 2290 of file XrdSecProtocolgsi.cc.

 {
    // Dump summary of GSI init options
 // EPNAME("InitOpts");
  
    // For clients print only if really required (for servers we notified it
    // always once for all)
    if ((mode == 'c') && debug <= 0) return;
    
    POPTS(t, " -------------------------------------------------------------------");
    POPTS(t, " Mode: "<< ((mode == 'c') ? "client" : "server"));
    POPTS(t, " Debug: "<< debug);
    POPTS(t, " CA dir: " << (certdir ? certdir : XrdSecProtocolgsi::CAdir));
    POPTS(t, " CA verification level: "<< getOptName(caVerOpts, ca));
    POPTS(t, " CRL dir: " << (crldir ? crldir : XrdSecProtocolgsi::CRLdir ));
    POPTS(t, " CRL extension: " << (crlext ? crlext :  XrdSecProtocolgsi::DefCRLext));
    POPTS(t, " CRL check level: "<< getOptName(crlOpts,crl));
    if (crl > 0) POPTS(t, " CRL refresh time: "<< crlrefresh);
    if (mode == 'c') {
       POPTS(t, " Certificate: " << (cert ? cert : XrdSecProtocolgsi::UsrCert));
       POPTS(t, " Key: " << (key ? key : XrdSecProtocolgsi::UsrKey));
       POPTS(t, " Proxy file: " << XrdSecProtocolgsi::UsrProxy);
       POPTS(t, " Proxy validity: " << (valid ? valid : XrdSecProtocolgsi::PxyValid));
       POPTS(t, " Proxy dep length: " << deplen);
       POPTS(t, " Proxy bits: " << bits);
       POPTS(t, " Proxy sign option: "<< sigpxy);
       POPTS(t, " Proxy delegation option: "<< dlgpxy);
       if (createpxy) POPTS(t, " Pure Cert/Key authentication allowed");
       POPTS(t, " Allowed server names: "<< (srvnames ? srvnames : "[*/]<target host name>[/*]"));
    } else {
       POPTS(t, " Certificate: " << (cert ? cert : XrdSecProtocolgsi::SrvCert));
       POPTS(t, " Key: " << (key ? key : XrdSecProtocolgsi::SrvKey));
       POPTS(t, " Proxy delegation option: "<< getOptName(sDlgOpts,dlgpxy));
       if (exppxy)
          POPTS(t, " Template for exported proxy: "<< (exppxy ? exppxy : gUsrPxyDef));
       POPTS(t, " GRIDmap file: " << (gridmap ? gridmap : XrdSecProtocolgsi::GMAPFile));
       POPTS(t, " GRIDmap option: "<< getOptName(gmoOpts,ogmap));
       POPTS(t, " GRIDmap cache entries expiration (secs): "<< gmapto);
       if (gmapfun) {
          POPTS(t, " DN mapping function: " << gmapfun);
          if (gmapfunparms) POPTS(t, " DN mapping function parms: " << gmapfunparms);
       } else {
          if (gmapfunparms) POPTS(t, " DN mapping function parms: ignored (no mapping function defined)");
       }
       if (authzfun) {
          POPTS(t, " Authz function: " << authzfun);
          if (authzfunparms) POPTS(t, " Authz function parms: " << authzfunparms);
          POPTS(t, " Authz call: " <<getOptName(azCallOpts,authzcall));
          POPTS(t, " Authz cache entries expiration (secs): " << authzto);
       } else {
          if (authzfunparms) POPTS(t, " Authz function parms: ignored (no authz function defined)");
       }
       if (authzpxy)
          POPTS(t, " Client proxy availability in XrdSecEntity.endorsement: "<< getOptName(azPxyOpts,authzpxy));
       POPTS(t, " VOMS option: "<< getOptName(vomsatOpts,vomsat));
       if (vomsfun) {
          POPTS(t, " VOMS extraction function: " << vomsfun);
          if (vomsfunparms) POPTS(t, " VOMS extraction function parms: " << vomsfunparms);
       } else {
          if (vomsfunparms) POPTS(t, " VOMS extraction function parms: ignored (no VOMS extraction function defined)");
       }
       POPTS(t, " MonInfo option: "<< moninfo);
       if (!hashcomp)
          POPTS(t, " Name hashing algorithm compatibility OFF");
       POPTS(t, " Show DN option: "<<showDN);
    }
    // Crypto options
    POPTS(t, " Crypto modules: "<< (clist ? clist : XrdSecProtocolgsi::DefCrypto));
    POPTS(t, " Ciphers: "<< (cipher ? cipher : XrdSecProtocolgsi::DefCipher));
    POPTS(t, " MDigests: "<< (md ? md : XrdSecProtocolgsi::DefMD));
    if (trustdns) {
       POPTS(t, " Trusting DNS for hostname checking");
    } else {
       POPTS(t, " Untrusting DNS for hostname checking");
    }
    POPTS(t, " -------------------------------------------------------------------");
 }