gwsd

Description:	Provides the interface between the mod_gws apache module and the external groups web service.

Summary

In order to protect the credentials used to authenticate to the groups web service a daemon process, gwsd, running as root, performs all communications with the service. The module, mod_gws, interacts only with the daemon.

The daemon can report errors to Argus and to proxd.

Command-line

gwsd options

gwsd [-d] [-v] [-n] -c config_file

Description:

Starts gwsd. The program will become a deamon unless '-n' is specified. > > > >

-v	verbose logging
-d	debug logging (syslog will also go to stderr)
-n	run in foreground - no daemon
-c config_file	configuration file

AuthURL Directive

Description:	Specifies the URL template for membership requests. The template is a printf format and should contain two '%s'. The first is for the group name; the second for the member id.
Syntax:	`AuthURL URL_template`

Examples

AuthURL https://iam-ws.u.washington.edu/group_sws/v1/group/%s/effective_member/%s

CertDB Directive

Description:	Specifies the file of acceptable CAs for certificate verification.
Syntax:	`CertDB file`

Cert Directive

Description:	Specifies gwsd's authentication certificate (PEM).
Syntax:	`Cert file`

Key Directive

Description:	Specifies gwsd's authentication certificate's key (PEM).
Syntax:	`Key file`

Socket Directive

Description:	Specifies socket to listen for module requests.
Syntax:	`Socket path`
Default:	`/var/run/gwsd.sock`

Examples

Socket /var/run/gwsd.sock

PidFile Directive

Description:	Specifies socket to listen for module requests.
Syntax:	`PidFile path`
Default:	`/var/run/gwsd.pid`

Examples

PidFile /var/run/gwsd.pid

ActAsHeader Directive

Description:	Specifies the header to request 'act-as' functionality. Default value is shown in the example.
Syntax:	`ActAsHeader header_name`

Examples

ActAsHeader X-UW-Act-as

ClientPW Directive

Description:	Specifies the password file for module authentication.
Syntax:	`ClientPW file`

Examples

ClientPW /usr/share/gwsd.pw

Syslog Directive

Description:	Specifies the syslog facility to use (local[0-7].
Syntax:	`Syslog local[0-7]`
Default:	`syslog`

Examples

Syslog local2