source: TI12-security/trunk/NDGSecurity/python/ndg_security_test/ndg/security/test/integration/dap/server.ini @ 7077

#
# NDG Security pyDAP version 3.0 Test configuration
#
# NERC DataGrid
#
# Author: P J Kershaw
#
# Date: 15/05/09
#
# Copyright: STFC 2009
#
# Licence: BSD - see top level directory for details
#
# The %(here)s variable will be replaced with the parent directory of this 
# file
#
[DEFAULT]
testConfigDir = %(here)s/../../config
beakerSessionKeyName = beaker.session.ndg.security

[server:main]
use = egg:Paste#http
# Change to 0.0.0.0 to make public
host = 127.0.0.1
port = 8001

# Composite to enable templates to pick up static content
[composit:cascade]
use = egg:Paste#cascade
app1 = staticLayout
app2 = pydap
catch = 404

# Layout folder contains stylesheet and graphics for templates
[app:staticLayout]
use = egg:Paste#static
document_root = %(here)s/layout

# pyDAP Application
[app:pydap]
use = egg:pydap#server
root = %(here)s/data
templates = %(here)s/template
x-wsgiorg.throw_errors = 0

# Pipeline to with security filters to protect the pyDAP application
[pipeline:main]
pipeline = BeakerSessionFilter AuthenticationFilter AuthorizationFilter cascade


[filter:BeakerSessionFilter]
paste.filter_app_factory = beaker.middleware:SessionMiddleware

# Cookie name
beaker.session.key = ndg.security.session

# WSGI environ key name
environ_key = %(beakerSessionKeyName)s
beaker.session.secret = rBIvKXLa+REYB8pM/8pdPoorVpKQuaOW
beaker.cache.data_dir = %(here)s/authn/beaker/cache
beaker.session.data_dir = %(here)s/authn/beaker/sessions

#beaker.session.cookie_domain = .localhost

[filter:AuthenticationFilter]
paste.filter_app_factory = ndg.security.server.wsgi.authn:AuthenticationMiddleware
prefix = authN.

# Set redirect for OpenID Relying Party in the Security Services app instance
#authN.redirectURI = https://localhost:7443/verify
authN.redirectURI = https://localhost/verify

# Default URI to return to if middleware wasn't able to set via HTTP_REFERER or
# passed return to query argument
authN.sessionHandler.defaultLogoutReturnToURI = https://localhost:7443/

# AuthKit Set-up
authkit.setup.method=cookie

# This cookie name and secret MUST agree with the name used by the security web
# services app
authkit.cookie.name=ndg.security.auth
authkit.cookie.secret=9wvZObs9anUEhSIAnJNoY2iJq59FfYZr
authkit.cookie.signoutpath = /logout

# Disable inclusion of client IP address from cookie signature due to 
# suspected problem with AuthKit setting it when a HTTP Proxy is in place
authkit.cookie.includeip = False

#authkit.cookie.params.expires = 2
#authkit.cookie.params.domain = .localhost

# environ key name for beaker session
authkit.session.middleware = %(beakerSessionKeyName)s


[filter:AuthorizationFilter]
paste.filter_app_factory=ndg.security.server.wsgi.authz:SAMLAuthorizationMiddleware.filter_app_factory
prefix = authz.
authz.pepResultHandler = ndg.security.server.wsgi.authz.result_handler.genshi.GenshiPEPResultHandlerMiddleware
authz.pepResultHandler.staticContentDir = %(here)s/pep_result_handler
authz.pepResultHandler.baseURL = http://localhost:8001
authz.pepResultHandler.heading = Access Denied
authz.pepResultHandler.messageTemplate = Access is forbidden for this resource:<div id="accessDeniedMessage">$pdpResponseMsg</div>Please check with your site administrator that you have the required access privileges.
authz.pepResultHandler.footerText = This site is for test purposes only.
authz.pepResultHandler.rightLink = http://ceda.ac.uk/
authz.pepResultHandler.rightImage = %(authz.pepResultHandler.baseURL)s/layout/CEDA_RightButton60.png
authz.pepResultHandler.rightAlt = Centre for Environmental Data Archival
authz.pepResultHandler.helpIcon = %(authz.pepResultHandler.baseURL)s/layout/icons/help.png

policy.filePath = %(here)s/authz/policy.xml

# Settings for Policy Information Point used by the Policy Decision Point to
# retrieve subject attributes from the Attribute Authority associated with the
# resource to be accessed

# If omitted, DN of SSL Cert is used
pip.attributeQuery.issuerName = 
pip.attributeQuery.subjectIdFormat = urn:esg:openid
pip.attributeQuery.clockSkewTolerance = 0.
pip.attributeQuery.queryAttributes.0 = urn:siteA:security:authz:1.0:attr, , http://www.w3.org/2001/XMLSchema#string
pip.attributeQuery.sslCACertDir=%(testConfigDir)s/ca
pip.attributeQuery.sslCertFilePath=%(testConfigDir)s/pki/test.crt
pip.attributeQuery.sslPriKeyFilePath=%(testConfigDir)s/pki/test.key


# Logging configuration
[loggers]
keys = root, ndg

[handlers]
keys = console,logfile

[formatters]
keys = generic

[logger_root]
level = INFO
handlers = console

[logger_ndg]
level = DEBUG
handlers = logfile
qualname = ndg

[handler_console]
class = StreamHandler
args = (sys.stderr,)
level = NOTSET
formatter = generic

[handler_logfile]
class = handlers.RotatingFileHandler
level=NOTSET
formatter=generic
args=(os.path.join('./', 'log', 'server.log'), 'a', 100000, 10)

[formatter_generic]
format = %(asctime)s,%(msecs)03d %(levelname)-5.5s [%(name)s] %(message)s
datefmt = %H:%M:%S