📄 config.script
字号:
all platforms. This is default mode.:li.:xph.WINDOWS:exph. - This indicates that windows-based authentication should be used.This mode is only available on Windows systems.See :hdref refid=winuser. for more information.:li.:xph.NONE:exph. - This indicates that usernames will be honored but not authenticated.In this mode, passwords are ignored and processes are started under the indicatedusername. This mode is only available on Unix systems..*:li.PASSWD - This indicates that usernames/passwords will be authenticated using.*entries stored in the /etc/passwd file. This mode is only available on Unix systems..*:li.SHADOW - This indicates that usernames/passwords will be authenticated using.*entries stored in the /etc/shadow file. This mode is only available on Unix.*systems.:eul.:note.Previously, :xph.PASSWD:exph. and :xph.SHADOW:exph. were supported valuesfor the :xph.PROCESSAUTHMODE:exph. on Unix systems, but support for for thesemodes has been removed.:p.You may also change this setting dynamically using the PROCESS service's SET command.:p.:xph.DEFAULTAUTHUSERNAME:exph. specifies the username under which processeswill be started, by default. Note, this option IS valid even if processauthentication has been disabled.You may also change this setting dynamically using the PROCESS service's SET command.:p.:xph.DEFAULTAUTHPASSWORD:exph. specifies the password with which processeswill be authenticated, by default. Note, this option IS valid even if processauthentication has been disabled.You may also change this setting dynamically using the PROCESS service's SET command.:p.:xph.DEFAULTAUTHDISABLEDACTION:exph. specifies what default action should betaken if the user specifies a username/password on a request to start a processwhen process authentication has been disabled. The following values arerecognized::ul compact.:li.:xph.IGNORE:exph. - This indicates that the username/password should be ignored. Therequest will be processed as if the user had not specified these parameters.This is the default.:li.:xph.ERROR:exph. - This indicates that an error should be passed back to the user.:eul.You may also change this setting dynamically using the PROCESS service's SET command.:p.:xph.DEFAULTSHELL:exph. specifies the default shell to use when starting aprocess via a separate shell. The default shell used for Unix systems is /bin/sh.The default shell used for Windows NT/2000/XP/2003/Vista systems is "cmd.exe /c".The default shell used for Windows 95/98/ME systems is "command.com /c".You may also change this setting dynamically using the PROCESS service's SET command.:p.:xph.DEFAULTNEWCONSOLESHELL:exph. specifies the default shell to use whenstarting a process in a new console window (e.g. :xph.NEWCONSOLE:exph.) via a separate shell, overridingthe :xph.DEFAULTSHELL:exph. value if specified.You may also change this setting dynamically using the PROCESS service's SET command.:p.:xph.DEFAULTSAMECONSOLESHELL:exph. specifies the default shell to use whenstarting a process in the same console as STAFProc (e.g. :xph.SAMECONSOLE:exph.) via a separate shell,overriding the :xph.DEFAULTSHELL:exph. value if specified.You may also change this setting dynamically using the PROCESS service's SET command.:p.A shell value can contain substitution characters described in the following table.:table cols='* 4* *' align='c l c'.:tcap.Substitution Characters for Shells:thd.:c.Substitution character:c.Description:c.Supported systems:ethd.:row.:c.%c:c.Substitute the values specified by the :xph.COMMAND:exph. and:xph.PARMS:exph. options.:c.Windows and Unix:row.:c.%C:c.Same as %c, except the substituted value will be quoted (with allnested quotes properly escaped).:c.Windows and Unix:row.:c.%p:c.Substitute the value specified by the :xph.PASSWORD:exph. option,or an empty string if no :xph.PASSWORD:exph. is provided.:c.Windows and Unix:row.:c.%P:c.Same as %p, except the substituted value will be quoted (with allnested quotes properly escaped).:c.Windows and Unix:row.:c.%t:c.Substitute the value specified by the :xph.TITLE:exph. option,or <Unknown> if no :xph.TITLE:exph. is provided.:c.Windows and Unix:row.:c.%T:c.Same as %t, except the substituted value will be quoted (with allnested quotes properly escaped).:c.Windows and Unix:row.:c.%u:c.Substitute the value specified by the :xph.USERNAME:exph. option,or an empty string if no :xph.USERNAME:exph. is provided.:c.Windows and Unix:row.:c.%U:c.Same as %u, except the substituted value will be quoted (with allnested quotes properly escaped).:c.Windows and Unix:row.:c.%w:c.Substitute the value specified by the :xph.WORKLOAD:exph. option,or <Unknown> if no :xph.WORKLOAD:exph. is provided.:c.Windows and Unix:row.:c.%W:c.Same as %w, except the substituted value will be quoted (with allnested quotes properly escaped).:c.Windows and Unix:row.:c.%x:c.Substitute the values specified by the :xph.COMMAND:exph. and:xph.PARMS:exph. options followed by input/output redirection, ifI/O options are specified on the :xph.PROCESS START:exph. request(e.g. :xph.STDIN, STDOUT:exph.). When using this option, do notspecify any redirection in the :xph.COMMAND/PARMS:exph. values.:c.Windows and Unix:row.:c.%X:c.Same as %x, except the substituted value will be quoted (with allnested quotes properly escaped).:c.Windows and Unix:row.:c.%%:c.Substitute a %.:c.Windows and Unix:etable.:notel compact.:li.When specifying a shell value, it must contain one of the following: %c, %C, %x, %X.:li.The use of %c versus %C, as well as %x versus %X, is highly dependenton the shell you specify.If the shell expects the command and parameters to be parsed as a single string,then use %C or %X. If the shell expects the command and parameters to be parsed as separatestrings, then use %c or %x.:li.Specifying 'su - %u -c %C' as the shell when starting a process on a UNIX system(so that it simulates the environment of the user specified by the :xph.USERNAME:exph. option)will cause variables specified via an ENV option to not be set for the process.:enotel.:h4.Examples:xmp.SET CONNECTATTEMPTS 5 CONNECTRETRYDELAY 2000.*SET MAXFILES 1000SET MAXQUEUESIZE 1000SET INITIALTHREADS 10 THREADGROWTHDELTA 3SET DATADIR /test/stafdataSET DEFAULTINTERFACE tcpSET DEFAULTAUTHENTICATOR SampleAuthSET ENABLEDIAGSSET RESULTCOMPATIBILITYMODE noneSET DEFAULTSTOPUSING SIGTERM DEFAULTSAMECONSOLESET DEFAULTFOCUS minimizedSET PROCESSAUTHMODE windows DEFAULTAUTHUSERNAME testuser DEFAULTAUTHPASSWORD tupassSET PROCESSAUTHMODE none DEFAULTAUTHUSERNAME guest DEFAULTAUTHDISABLEDACTION errorSET DEFAULTSHELL "C:/cygwin/bin/bash.exe -c %C"SET DEFAULTSAMECONSOLESHELL "/bin/csh -c %C"SET DEFAULTNEWCONSOLESHELL "xterm -title %T -e /bin/sh -c %X"SET DEFAULTSHELL "su - %u -c %C":exmp..*.*---------------------------------------------------------------------.*:ih1.configuration:i2.variables:ih1.variables:i2.configuration:h2 id=varcfg.Variables:h3.Description:p.You may set STAF variables in the system or shared variable pool at startup byusing the SET VAR configuration statement. SET VAR will set a variable to a certainvalue. The variable is created if it does not exist.:p.Note that you may SET multiple variables with a single request.:h4.Syntax:xmp.SET &lbrk.SYSTEM | SHARED&rbrk. VAR <Name=Value> &lbrk.VAR <Name=Value>&rbrk. ...:exmp.:p.:xph.SYSTEM:exph. means the variable is to be set in system variable pool.This is the default.:p.:xph.SHARED:exph. means the variable is to be set in shared variable pool.:p.:xph.VAR:exph. means the variable to be set. Name is the name of the variableand Value is the value of the variable.:h4.Examples:xmp.SET VAR WebServer=testsrv1.test.austin.ibm.comSET SHARED VAR "Author1=Jane Tester" VAR "Author2=John Tester"SET SYSTEM VAR STAF/Service/Log/Directory={STAF/Config/BootDrive}\STAF\Log:exmp..*.*---------------------------------------------------------------------.*:ih1.configuration:i2.trust:ih1.trust:i2.configuration:h2 id=trustcfg.Trust:h3.Description:p.You may grant access to machines or users by using the TRUST configurationstatement.:p.Trust configuration statements for machines are based on the networkidentification of the system. In particular, different trust levels can begiven to the same system coming in through different networking interfaces.Both logical and pysical identifiers may be used in trust configurationstatements for machines.:p.Trust configuration statements for users require that you havean authenticator registered.:h4.Syntax:xmp.TRUST LEVEL <Level> < DEFAULT | MACHINE <Machine> &lbrk.MACHINE <Machine>&rbrk.... | USER <User> &lbrk.USER <User>&rbrk.... >:exmp.:p.:xph.LEVEL:exph. is the level of trust that you wish to grant,see :hdref refid=trstcon. for a list of trust levels.:p.:xph.DEFAULT:exph. indicates that you wish to set the default trust level.This is the trust level that will be used for machines which have noexplicit trust level set. If no default has been specified in the STAFConfiguration file, the default is set to 3.:p.:xph.MACHINE:exph. indicates a specific machine for which to set a trustlevel.The format for <Machine> is::xmp. &lbrk.<Interface>&colon.//&rbrk.<System Identifier>:exmp.where::ul compact.:li.:xph.<Interface>:exph. is the name of the network interface.It is case-insensitive.If the name of a network interface is not specified, wildcard '*' issubstituted which will match any network interface name.:li.:xph.<System Identifier>:exph. is a valid network identifier for the networkinterface. It is case-insensitive.Logical or physical identifiers may be specified for the systemidentifier. Physical identifiers are the lowest-level identifieravailable via the specified network interface. Logical identifiers are morehuman readable identifiers tha ultimately map to physical identifiers.For example, for a TCP/IP interface, the physical identifier for amachine is the IP address, while the logical identifier for a machineis the hostname.:eul.:p.Note that you can specify match patterns (e.g. wild cards) in theinterface and the system identifier. These patterns recognize twospecial characters, '*' and '?', where '*' matches a string ofcharacters (including an empty string) and '?' matches any singlecharacter (the empty string does not match).:p.Note that if you specify the hostname in a trust specificationfor a TCP/IP interface, you must specify the long host name(and/or wildcards).:p.Note that if you specify a port (e.g. @6500) at the end of thesystem identifier, it will be removed.:p.Requests coming from the local system will now appear as thoughthey came from an interface named "local" and a system identifierof "local". This allows you to specify a trust level for localrequests. (In STAF V2.x, local requests were automatically granteda trust level of 5.):p.:xph.USER:exph. indicates a user for which to set a trust level.The format for <User> is::xmp. &lbrk.<Authenticator>&colon.//&rbrk.<User Identifier>:exmp.where::ul compact.:li.<Authenticator> is the name of the authenticator.It is case-insensitive. If an authenticator is not specified, the defaultauthenticator is used.:li.<User Identifier> is a valid user identifier for the authenticator.It is case sensitive.:eul.:p.Note that you can specify match patterns in the authenticator nameand the user identifier. These patterns recognize two special characters,'*' and '?', where '*' matches a string of characters (including anempty string) and '?' matches any single character (the empty stringdoes not match).:h4 id=userTrustMatching.How to determine Effective Trust for a User:p.If multiple trust specifications would match the same user,STAF will rank the matching specifications as follows and use thematch with the highest (i.e. lowest numbered) rank::ol compact.:li.Exact match of authenticator and user identifier:li.Exact match of authenticator, wildcard match of user identifier:li.Wildcard authenticator match, exact match of user identifier:li.Wildcard authenticator match, wildcard match of user identifier:eol.If multiple trust specifications match within the same rank, thelowest matching trust level will be used.:h4 id=machineTrustMatching.How to determine Effective Trust for a Machine:p.If multiple trust specifications would match the same system,STAF will rank the matching specifications as follows and use thematch with the highest (i.e. lowest numbered) rank::ol compact.:li.Exact match of interface and physical network identifier:li.Exact match of interface and logical network identifier:li.Exact match of interface, wildcard match of physical network identifier:li.Exact match of interface, wildcard match of logical network identifier:li.Wildcard interface match, exact match of physical network identifier:li.Wildcard interface match, exact match of logical network identifier:li.Wildcard interface match, wildcard match of physical network identifier:li.Wildcard interface match, wildcard match of logical network identifier:eol.If multiple trust specifications match within the same rank, thelowest matching trust level will be used.:note.The user authentication overrides the machine authentication.For example, if the machine trust level is 3 and the authenticated userhas a trust level of 4, then the handle will have a trust level of 4.If the user has been authenticated, but there are no user authenticationtrust matches, the machine trust level is used. If there is nomachine trust level specified, then the default trust level is used.:ih1.examples:i2.trust:h4.Examples:xmp.TRUST DEFAULT LEVEL 3TRUST LEVEL 5 MACHINE local&colon.//localTRUST LEVEL 5 MACHINE client1.austin.ibm.com MACHINE client3.raleigh.ibm.comTRUST LEVEL 5 MACHINE 9.3.224.16TRUST LEVEL 4 MACHINE tcp&colon.//mysystem.site.comTRUST LEVEL 0 MACHINE badguy.austin.ibm.comTRUST LEVEL 3 MACHINE tcp2&colon.//9.3.224.*TRUST LEVEL 2 MACHINE *.austin.ibm.comTRUST LEVEL 2 MACHINE tcp*&colon.//*.site.com
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -