set redirector = elephant101.heprc.uvic.ca
set xrddir = /home/fizz/

all.manager $(redirector):1095
all.export /rdc

ofs.trace all
xrd.trace all
cms.trace all
http.trace all
sec.trace all
xrootd.trace all

# TLS Setup
xrd.tls /etc/grid-security/xrd/xrdcert.pem /etc/grid-security/xrd/xrdkey.pem
xrd.tlsca certdir /etc/grid-security/certificates
xrootd.tls all

if $redirector
  all.role manager
  http.desthttps yes
else
  all.role server
  xrootd.seclib libXrdSec.so
  sec.protocol gsi -cert:/etc/grid-security/xrd/xrdcert.pem \
                   -certdir:/etc/grid-security/certificates \
                   -dlgpxy:ignore \
                   -vomsat:extract \
                   -d:3 \
                   -vomsfun:libXrdVoms.so
fi

http.secxtractor libXrdHttpVOMS.so

if exec xrootd
  xrd.protocol http:8080 libXrdHttp.so
fi

# Authorization configuration
ofs.authorize
acc.audit deny grant
acc.authdb $(xrddir)Authfile

# TPC Setup
ofs.tpc logok autorm pgm $(xrddir)tpc-noproxy.sh
#setenv X509_USER_CERT = /etc/grid-security/xrd/xrdcert.pem
#setenv X509_USER_KEY = /etc/grid-security/xrd/xrdkey.pem

# Macaroon setup
http.exthandler xrdtpc libXrdHttpTPC.so
http.header2cgi Authorization authz

http.exthandler xrdmacaroons libXrdMacaroons.so
macaroons.secretkey $(xrddir)macaroon-secret
all.sitename fizz-testing
ofs.authlib libXrdMacaroons.so


########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-L&A=1