1 karl 1.1 //%LICENSE////////////////////////////////////////////////////////////////
2 //
3 // Licensed to The Open Group (TOG) under one or more contributor license
4 // agreements. Refer to the OpenPegasusNOTICE.txt file distributed with
5 // this work for additional information regarding copyright ownership.
6 // Each contributor licenses this file to you under the OpenPegasus Open
7 // Source License; you may not use this file except in compliance with the
8 // License.
9 //
10 // Permission is hereby granted, free of charge, to any person obtaining a
11 // copy of this software and associated documentation files (the "Software"),
12 // to deal in the Software without restriction, including without limitation
13 // the rights to use, copy, modify, merge, publish, distribute, sublicense,
14 // and/or sell copies of the Software, and to permit persons to whom the
15 // Software is furnished to do so, subject to the following conditions:
16 //
17 // The above copyright notice and this permission notice shall be included
18 // in all copies or substantial portions of the Software.
19 //
20 // THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
21 // OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
22 karl 1.1 // MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
23 // IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
24 // CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
25 // TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
26 // SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
27 //
28 //////////////////////////////////////////////////////////////////////////
29 //
30 //%/////////////////////////////////////////////////////////////////////////////
31
32
33 ///////////////////////////////////////////////////////////////////////////////
34 //
35 // This file defines the table of help descriptions. It is maintained as
36 // a separate file so that the help info can be modified without touching
37 // any of the code of Config
38 //
39 ///////////////////////////////////////////////////////////////////////////////
40
41 #include "ConfigPropertyHelp.h"
|
42 karl 1.12 #include <Pegasus/Common/Constants.h>
|
43 karl 1.1
44 PEGASUS_NAMESPACE_BEGIN
45
46 // This table defines help descriptions for cimconfig propertis which do
47 // not have more detailed help in their property owner classes.
48 // FUTURE: This should be loadable from an external file or otherwise
49 // part of clients rather than in memory. Big waste of memory.
50 //
|
51 karl 1.2 // NOTE: The internationalization message bundle for this set of
52 // messages SHOULD BE generated with the tool BldMsgBundle which is
53 // a test program in Config/tests. Please use this tool to generate
54 // this component of the message bundle for Config if any of the messages
55 // change rather than manually editing the individual messages in the bundle.
56 //
57 // Generally format the messages as they will be displayed with NL characters
58 // to provide formatting for a terminal output (i.e ~< 60 characters). NL
59 // characters should be used at any point the user wants to insure that
60 // there is a new line and spaces used for indenting. Do not put an NL at
61 // the end of the message.
|
62 karl 1.4 // Rules for formatting the messages:
63 // 1. Formatting is done here. The help display just uses the formatting
64 // defined here. Thus, any indenting of Possible Values, etc. andf EOLs
65 // must be defined in this file. Lines should not exceed 80 characters.
66 // 2. This text may be translated since it goes into the message bundle.
67 // Put any words or phrases that are NOT to be translated into single
68 // quotes. This applies primarily to the possible values but should
|
69 dl.meetei 1.5 // include words like 'true', etc. if they are to be literally used
|
70 karl 1.4 // on the command line or displayed and used literally.
|
71 karl 1.2 //
|
72 karl 1.1 struct configPropertyDescription configPropertyDescriptionList[] =
73 {
74 {"traceComponents",
|
75 karl 1.4 "Defines OpenPegasus server components to be traced.\n"
76 "Define multiple components as comma-separated list. 'ALL' traces\n"
77 "all components. Only OpenPegasus server components on this list\n"
78 "generate entries in the trace output."},
|
79 karl 1.1
80 {"traceLevel",
|
81 karl 1.4 "Single digit defines level of server tracing enabled.\n"
|
82 karl 1.1 "Possible Values:\n"
83 " 0 Trace off (default)\n"
84 " 1 Severe and log messages\n"
85 " 2 Basic flow trace messages, low data detail\n"
86 " 3 Inter-function logic flow, medium data detail\n"
87 " 4 High data detail\n"
88 " 5 High data detail + Method Enter & Exit"},
89
|
90 karl 1.4 {"traceFilePath",
91 "Specifies location and name of OpenPegasus trace file.\n"
92 "Ignored when 'traceFacility!=File."},
|
93 karl 1.1
94 {"traceMemoryBufferKbytes",
|
95 karl 1.4 "Integer defines size of buffer for in-memory tracing.\n"
96 "Value is in in kbytes. Minimum value is 16 kbytes. Ignored if\n"
97 "'traceFacility!=memory'"},
98
99 {"traceFileSizeKBytes",
100 "Integer defines the maximum size of the tracefile in kbytes.\n"
101 "The trace file will be rolled over when size exceeds the specified\n"
102 "size. Minimum is 10,240 kbytes. Maximum is 2,097 mbytes."
103 "Ignored if 'traceFacility=memory'. See also 'numberOfTraceFiles'."},
104
105 {"numberOfTraceFiles","Integer defines the maximum number of trace files\n"
106 "kept when trace files are rolled over upon reaching maximum size\n"
107 "'traceFileSizeKBytes'. Minimum is 3. Maximum is 20"},
|
108 karl 1.1
|
109 karl 1.4 {"traceFacility", "Keyword selects the trace destination.\n"
110 "Possible Values:\n"
111 " 'File' Trace output to file defined by 'traceFilePath'\n"
112 " 'Log' Trace output to log file\n"
113 " 'Memory' Trace output to memory"},
114
115 {"hostname", "Override local system supplied hostname CIM Server uses to\n"
116 "build objects for WBEM operations that return hostname (ex.\n"
117 "associators). Used where environment needs operations to\n"
118 "return operation responses with hostname other than server name\n"
119 "(ex. behind firewalls). When setting this option,\n"
120 "'fullyQualifiedHostName' should be set also."},
121
122 {"fullyQualifiedHostName", "Override local system supplied fully\n"
123 "qualified hostname (with domain)CIM Server uses to build objects\n"
124 "for WBEM Operations that return hostname (ex. associators).\n"
125 "Used where environment needs operations to return operation\n"
126 "responses with hostname other than server name (ex. behind firewalls)."
127 "\nWhen setting this option 'hostname' should be set also."},
128
129 {"logDir", "Specifies name of directory to be used for OpenPegasus "
130 karl 1.4 "specific log files.\n"
131 "Not supported if PEGASUS_USE_SYSLOGS "
|
132 karl 1.1 "defined"},
133
134 {"maxLogFileSizeKBytes",
|
135 karl 1.4 "Integer defines maximum size of the logfile in kbytes.\n"
136 "If logfile size exceeds maxLogFileSizeKBytes logfile will be pruned.\n"
137 "Minimum value is 32 KB. Not supported if PEGASUS_USE_SYSLOGS\n"
138 "defined."},
139
140 {"logLevel",
141 "Keyword defines the desired level of logging.\n"
142 "Log levels are accumulative(i.e. 'warning' logs 'warning', 'severe',\n"
143 "and 'fatal'.\n"
144 "Possible Values:\n"
145 " 'trace' Most Detailed. Output all log events\n"
146 " 'information' Log information level. Default \n"
147 " 'warning' Log warnings and more severe events \n"
148 " 'severe' Log fatal and severe events \n"
149 " 'fatal' Log only events that are fatal to server"},
|
150 karl 1.1
151 {"enableHttpConnection",
152 "If 'true', allows connection to CIM Server using HTTP protocol"},
153
154 {"enableHttpsConnection",
155 "If 'true', allows connection to the CIM Server using HTTPS protocol\n"
156 "(HTTP using Secure Socket Layer encryption)"},
157
|
158 karl 1.4 {"httpPort", "Integer defines HTTP port number.\n"
|
159 karl 1.1 "OpenPegasus first attempts to look up port number for HTTP\n"
160 "using getservbyname for the 'wbem-http' service. httpPort.\n"
161 "configuration setting used only when getservbyname lookup fails.\n"
162 "Use of port 5988 recommended by DMTF"},
163
|
164 karl 1.4 {"httpsPort", "Integer that defines HTTPS port number.\n"
165 "OpenPegasus first attempts to look up port number for\n"
166 "HTTPS using getservbyname for the 'wbem-https' service. httpPorts\n"
|
167 karl 1.1 "configuration setting used only when the getservbyname lookup fails.\n"
168 "Use of port 5989 recommended by DMTF"},
169
170 {"daemon",
171 "If 'true' enables forking of the CIM Server to create a background\n"
172 "daemon process."},
|
173 karl 1.4 /// needs more info
|
174 karl 1.1 {"slp",
|
175 karl 1.4 "If 'true', OpenPegasus activates an SLP SA and issues DMTF defined\n"
176 "SLP advertisements to this SA on startup."},
|
177 karl 1.1
178 {"enableAssociationTraversal",
|
179 karl 1.4 "If 'true', CIM Server supports the association traversal operators:\n"
180 " Associators, AssociatorNames,References, and ReferenceNames."},
|
181 karl 1.1
182 {"enableIndicationService",
183 "If 'true', the CIM Server will support CIM Indications."},
184
185 {"enableAuthentication",
186 "If 'true', a Client must be authenticated to access the CIM Server."},
187
188 {"enableNamespaceAuthorization",
189 "If 'true', CIM Server restricts access to namespaces based on\n"
190 "configured user authorizations [user authorizations may be\n"
|
191 karl 1.4 "configured using the 'cimauth' command]"},
|
192 karl 1.1
|
193 jsafrane 1.13 {"httpAuthType", "Type of HTTP authentication. Either 'basic'\n"
|
194 jsafrane 1.10 "indicating basic authentication or 'negotiate' indicating use of\n"
|
195 jsafrane 1.13 "HTTP Negotiate authentication method. 'basic' is the default one."},
|
196 karl 1.1
197 {"passwordFilePath", "Path to password file if password file used for\n"
198 "user authentication."},
199
200 {"sslCertificateFilePath",
201 "File containing the CIM Server SSL Certificate."},
|
202 karl 1.4 //// TBD Clarify if just file name or path also. Both above and following
|
203 karl 1.1 {"sslKeyFilePath",
204 "File Containing private key for CIM Server SSL Certificate."},
205
206 {"sslTrustStore",
|
207 karl 1.4 "Specifies location of OpenSSL truststore.\n"
208 "Truststore can be either file or directory. If the truststore is a\n"
209 "directory, all certificates in the directory are trusted."},
|
210 karl 1.1
211 {"crlStore", "Specifies location of OpenSSL certificate revocation list.\n"
212 "if enabled."},
213
214 {"sslClientVerificationMode",
215 "Level of support for certificate-based authentication.\n"
|
216 karl 1.4 "Valid only if 'enableHttpsConnection=true'\n"
217 "Possible Values:\n"
218 "'required': HTTPS client MUST present a trusted certificate to"
219 " access\n"
|
220 karl 1.1 " CIM Server. If client fails to send a certificate or sends an\n"
|
221 karl 1.4 " untrusted certificate, the connection is rejected.\n"
222 "'optional': HTTPS client may, but is not required to, present a\n"
223 " trusted certificate to access the server. Server requests and\n"
224 " validates client certificate, but the connection is accepted if"
225 " no\n"
226 " certificate or an untrusted certificate is sent. Server will\n"
|
227 karl 1.1 " then seek to authenticate client via authentication header.\n"
|
228 karl 1.4 "'disabled': CIM Server will not allow HTTPS clients to authenticate\n"
229 " using a certificate. Basic authentication will be used to\n"
230 " authenticate HTTPS clients"},
|
231 karl 1.1
232 {"sslTrustStoreUserName",
|
233 karl 1.4 "System user name to be associated with all certificate-based "
234 "authenticated\nrequests.\n"
235 "No default; for security reasons, system administrator must\n"
236 "explicitly specify this value. Allows a single user name to be\n"
237 "specified. This user will be associated with all certificates in\n"
238 "the truststore"},
|
239 karl 1.1
240 {"kerberosServiceName", "TBD"},
241
242 {"enableCFZAPPLID", "TBD"},
|
243 karl 1.4 //// Definition Format needs clarification. i.e. multiple ciphers
|
244 karl 1.1 {"sslCipherSuite",
245 "String containing OpenSSL cipher specifications to configure\n"
246 "cipher suite the client is permitted to negotiate with the server\n"
|
247 karl 1.4 "during SSL handshake phase. Enclose values in single quotes to\n"
248 "avoid issues with special characters. Default if this parameter is\n"
249 "is the list of ciphers in OpenSSL."},
|
250 karl 1.1
251 {"repositoryIsDefaultInstanceProvider",
252 "If 'true', Repository functions as Provider (for instance and\n"
253 "association operations) for all classes without an explicitly\n"
254 "registered Provider."},
255
256 {"enableBinaryRepository",
|
257 karl 1.4 "If 'true' activates the binary repository support on the next\n"
258 "restart of cimserver. OpenPegasus supports repositories with a\n"
259 "mixture of binary and XML objects."},
|
260 karl 1.1
261 {"shutdownTimeout",
262 "When 'cimserver -s' shutdown command is issued, specifies maximum\n"
263 "time in seconds for CIM Server to complete outstanding CIM\n"
264 "operation requests before shutting down. If specified timeout\n"
265 "period expires, CIM Server shuts down, even with CIM operations\n"
266 "in progress. Minimum value is 2 seconds."},
267
268 {"repositoryDir",
269 "Name of directory to be used for the OpenPegasus repository."},
270
271 {"providerManagerDir",
272 "Name of the directory containing ProviderManager plugin libraries.\n"
273 "Should be a dedicated directory to minimize inspection of\n"
274 "non-applicable files."},
275
276 {"providerDir",
|
277 karl 1.4 "Names of directories that contains provider executables.\n"
278 "If multiple directories they should be comma-separated."},
|
279 karl 1.1
280 {"enableRemotePrivilegedUserAccess",
281 "If 'true', the CIM Server allows access by a privileged user from a\n"
282 "remote system. Many management operations require privileged user\n"
283 "access. Disabling remote access by privileged user could\n"
284 "significantly affect functionality."},
285
286 {"enableSubscriptionsForNonprivilegedUsers",
287 "If 'true', operations on indication filter, listener destination,\n"
288 "and subscription instances may be performed by non-privileged\n"
289 "users.Otherwise, these operations limited to privileged users."},
|
290 karl 1.4 //// This whole description is backwards. It really defines what
291 //// server will accept, not what client may issue
|
292 karl 1.1 {"authorizedUserGroups",
293 "If set, the value is list of comma-separated user\n"
294 "groups whose members may issue CIM requests. A user not a member of\n"
295 "any of these groups is restricted from issuing CIM requests, except\n"
296 "for privileged users (root user). If not set, any user may issue\n"
297 "CIM requests."},
298
299 {"messageDir",
|
300 karl 1.4 "Name of the directory used for the OpenPegasus translated\n"
|
301 karl 1.1 "message bundles."},
302
303 {"enableNormalization",
304 "If 'true', objects returned from instance providers are validated\n"
|
305 karl 1.4 "and normalized.\n"
306 "Errors encountered during normalization cause\n"
|
307 karl 1.1 "CIMException with the status code set to CIM_ERR_FAILED. Provider\n"
308 "modules in excludeMOdulesFromNormalizationList excluded from\n"
309 "normalization."},
310
311 {"excludeModulesFromNormalization",
312 "If not Null, the value is interpreted as comma-separated list of\n"
313 "Provider Module names to exclude from validation and normalization."},
314
|
315 karl 1.4 //// What is relation with the provider groups?
|
316 karl 1.1 {"forceProviderProcesses",
317 "If 'true', CIM Server runs Providers in separate processes rather\n"
318 "than loading and calling Provider libraries directly within\n"
319 "CIM Server process."},
320
321 {"maxProviderProcesses",
322 "Limits number of provider processes (see 'forceProviderProcesses')\n"
323 "that may run concurrently. Value '0' indicates that the number of\n"
324 " Provider Agent processes unlimited"},
325
|
326 karl 1.4 {"enableAuditLog", "If 'true', audit audit log entries for certain types\n"
327 "of CIM Server activities (i.e. activities that modify server state)\n"
328 "will be written to the system log. Aaudit log entries describe the\n"
329 "who, what, and when of audited activity."},
|
330 karl 1.1
331 {"socketWriteTimeout",
|
332 karl 1.4 "Integer defines the number of seconds the CIM Server will wait for a\n"
333 "client connection to be ready to receive data. If the CIM Server is\n"
334 "unable to write to a connection in this time, the connection is\n"
335 "closed."},
|
336 karl 1.1
337 {"idleConnectionTimeout",
338 "If set to a positive integer, value specifies a minimum timeout\n"
339 "value for idle client connections. If set to zero, idle client\n"
340 "connections do not time out."},
341
342 {"maxFailedProviderModuleRestarts",
343 "If set to a positive integer, this value specifies the number of\n"
344 "times a failed provider module with indications enabled is restarted\n"
345 "automatically before being moved to Degraded state. If set to zero,\n"
346 "failed provider module is not restarted with indications enabled\n"
347 "automatically and will be moved to Degraded state immediately."},
348
|
349 ashok.pathak 1.8 {"maxIndicationDeliveryRetryAttempts",
|
350 karl 1.1 "If set to a positive integer, value defines the number of times\n"
|
351 ashok.pathak 1.8 "indication service will enable the reliableIndication feature \n"
352 "& try to deliver an indication to a particular listener destination.\n"
353 "This does not effect the original delivery attempt. A value of 0\n"
354 "disables reliable indication feature completely, and cimserver will\n"
|
355 karl 1.12 "deliver the indication once."},
|
356 karl 1.1
357 {"minIndicationDeliveryRetryInterval",
358 "If set to a positive integer, defines the minimal time interval in\n"
359 "seconds indication service waits before retrying delivery of\n"
360 "indication to a listener destination that previously failed.\n"
|
361 marek 1.3 "Cimserver may take longer due to QoS or other processing."},
362
363 {"slpProviderStartupTimeout",
|
364 karl 1.4 "Timeout value in milliseconds used to specify how long the\n"
|
365 marek 1.3 "registration with an SLP SA may take. Registration will be retried\n"
|
366 karl 1.4 "three times. This value only needs to be increased in case\n"
367 "the loading of a set of providers whose implementation\n"
368 "of a registered profile takes very long."},
369
370 {"listenAddress",
371 "Network interface where the cimserver listens for connections."
372 " Default\n"
373 "value 'All' forces listening at all interfaces. A comma seperated\n"
374 "list(without spaces) forces listening at specific interfaces. For\n"
375 "example: 'listenAddress=All' or 'listenAddress=121.12.33.112', or\n"
|
376 ashok.pathak 1.7 "'listenAddress=121.33.21.26,127.0.0.1,fe80::fe62:9346%eth0'"},
377
378 {"sslBackwardCompatibility",
379 "If 'true', OpenPegasus support SSLv3 and TLSv1 protocol.If 'false',\n"
|
380 lawrence.luo 1.9 "OpenPegasus support only TLS1.2 protocol for openssl 1.0.1+"},
|
381 karl 1.12
|
382 lawrence.luo 1.9 {"webRoot",
383 "Points to a location where the static web pages to be served by the\n"
384 "pegasus webserver are stored"},
385
386 {"indexFile",
387 "Specifies the name of index file used by pegasus webserver, default \n"
388 "to index.html. This file should be available at the webRoot path"},
389
390 {"mimeTypesFile",
391 "Refers to the file which holds the mime types being served by the \n"
|
392 jsafrane 1.10 "pegasus webserver "},
|
393 ashok.pathak 1.7
|
394 jsafrane 1.10 {"mapToLocalName", "If 'true', all remote client names are translated to\n"
395 "local ones. This applies only to clients using Negotiate\n"
|
396 jsafrane 1.11 "authentication method."},
397
398 {"httpSessionTimeout",
399 "If set to a positive integer, value specifies a HTTP session\n"
400 "cookie expiration time in seconds. If set to 0, cookie\n"
401 "processing in Pegasus is disabled, it will not send nor accept\n"
402 "any cookies."}
|
403 karl 1.1 };
404
|
405 lawrence.luo 1.9 const Uint32 configPropertyDescriptionListSize =
|
406 karl 1.1 sizeof(configPropertyDescriptionList) /
407 sizeof(configPropertyDescriptionList[0]);
408
409 PEGASUS_NAMESPACE_END
410
|
411 ashok.pathak 1.7
|
Return to
ConfigPropertyHelp.cpp
CVS log
Up to [Pegasus] / pegasus / src / Pegasus / Config