mirror of
https://gitlab.com/openconnect/ocserv.git
synced 2026-02-10 08:46:58 +08:00
doc update
This commit is contained in:
@@ -2,7 +2,7 @@
|
|||||||
*
|
*
|
||||||
* DO NOT EDIT THIS FILE (ocserv-args.c)
|
* DO NOT EDIT THIS FILE (ocserv-args.c)
|
||||||
*
|
*
|
||||||
* It has been AutoGen-ed March 4, 2013 at 07:36:47 PM by AutoGen 5.16
|
* It has been AutoGen-ed March 4, 2013 at 08:45:35 PM by AutoGen 5.16
|
||||||
* From the definitions ocserv-args.def
|
* From the definitions ocserv-args.def
|
||||||
* and the template file options
|
* and the template file options
|
||||||
*
|
*
|
||||||
|
|||||||
@@ -73,8 +73,8 @@ An example configuration file follows.
|
|||||||
|
|
||||||
@example
|
@example
|
||||||
|
|
||||||
# User authentication method. Could be set multiple times and in that case
|
# User authentication method. Could be set multiple times and in
|
||||||
# all should succeed.
|
# that case all should succeed.
|
||||||
# Options: certificate, pam.
|
# Options: certificate, pam.
|
||||||
#auth = "certificate"
|
#auth = "certificate"
|
||||||
auth = "pam"
|
auth = "pam"
|
||||||
@@ -82,19 +82,20 @@ auth = "pam"
|
|||||||
# A banner to be displayed on clients
|
# A banner to be displayed on clients
|
||||||
#banner = "Welcome"
|
#banner = "Welcome"
|
||||||
|
|
||||||
# Use listen-host to limit to specific IPs or to the IPs of a provided hostname.
|
# Use listen-host to limit to specific IPs or to the IPs of a provided
|
||||||
|
# hostname.
|
||||||
#listen-host = [IP|HOSTNAME]
|
#listen-host = [IP|HOSTNAME]
|
||||||
|
|
||||||
# Limit the number of clients. Unset or set to zero for unlimited.
|
# Limit the number of clients. Unset or set to zero for unlimited.
|
||||||
#max-clients = 1024
|
#max-clients = 1024
|
||||||
max-clients = 16
|
max-clients = 16
|
||||||
|
|
||||||
# Limit the number of client connections to one every X milliseconds (X is the provided
|
# Limit the number of client connections to one every X milliseconds
|
||||||
# value). Set to zero for no limit.
|
# (X is the provided value). Set to zero for no limit.
|
||||||
#rate-limit-ms = 100
|
#rate-limit-ms = 100
|
||||||
|
|
||||||
# Limit the number of identical clients (i.e., users connecting multiple times)
|
# Limit the number of identical clients (i.e., users connecting
|
||||||
# Unset or set to zero for unlimited.
|
# multiple times). Unset or set to zero for unlimited.
|
||||||
max-same-clients = 2
|
max-same-clients = 2
|
||||||
|
|
||||||
# TCP and UDP port number
|
# TCP and UDP port number
|
||||||
@@ -128,15 +129,15 @@ server-key = /path/to/key.pem
|
|||||||
# is set.
|
# is set.
|
||||||
#ca-cert = /path/to/ca.pem
|
#ca-cert = /path/to/ca.pem
|
||||||
|
|
||||||
# The object identifier that will be used to read the user ID in the client certificate.
|
# The object identifier that will be used to read the user ID in the client
|
||||||
# The object identifier should be part of the certificate's DN
|
# certificate. The object identifier should be part of the certificate's DN
|
||||||
# Useful OIDs are:
|
# Useful OIDs are:
|
||||||
# CN = 2.5.4.3, UID = 0.9.2342.19200300.100.1.1
|
# CN = 2.5.4.3, UID = 0.9.2342.19200300.100.1.1
|
||||||
#cert-user-oid = 0.9.2342.19200300.100.1.1
|
#cert-user-oid = 0.9.2342.19200300.100.1.1
|
||||||
|
|
||||||
# The object identifier that will be used to read the user group in the client
|
# The object identifier that will be used to read the user group in the
|
||||||
# certificate. The object identifier should be part of the certificate's DN
|
# client certificate. The object identifier should be part of the certificate's
|
||||||
# Useful OIDs are:
|
# DN. Useful OIDs are:
|
||||||
# OU (organizational unit) = 2.5.4.11
|
# OU (organizational unit) = 2.5.4.11
|
||||||
#cert-group-oid = 2.5.4.11
|
#cert-group-oid = 2.5.4.11
|
||||||
|
|
||||||
@@ -150,9 +151,9 @@ tls-priorities = "PERFORMANCE:%SERVER_PRECEDENCE"
|
|||||||
# to authentication
|
# to authentication
|
||||||
auth-timeout = 40
|
auth-timeout = 40
|
||||||
|
|
||||||
# The time (in seconds) that a client is not allowed to reconnect after a failed
|
# The time (in seconds) that a client is not allowed to reconnect after
|
||||||
# authentication attempt.
|
# a failed authentication attempt.
|
||||||
min-reauth-time = 2
|
#min-reauth-time = 2
|
||||||
|
|
||||||
# Cookie validity time (in seconds)
|
# Cookie validity time (in seconds)
|
||||||
# Once a client is authenticated he's provided a cookie with
|
# Once a client is authenticated he's provided a cookie with
|
||||||
@@ -217,8 +218,9 @@ route = 192.168.1.0/255.255.255.0
|
|||||||
route = 192.168.5.0/255.255.255.0
|
route = 192.168.5.0/255.255.255.0
|
||||||
|
|
||||||
#
|
#
|
||||||
# The following options are for (experimental) AnyConnect client compatibility.
|
# The following options are for (experimental) AnyConnect client
|
||||||
# They are available if the server is built with --enable-anyconnect
|
# compatibility. They are only available if the server is built
|
||||||
|
# with --enable-anyconnect
|
||||||
#
|
#
|
||||||
|
|
||||||
# Client profile xml. A sample file exists in doc/profile.xml.
|
# Client profile xml. A sample file exists in doc/profile.xml.
|
||||||
|
|||||||
@@ -2,7 +2,7 @@
|
|||||||
*
|
*
|
||||||
* DO NOT EDIT THIS FILE (ocserv-args.h)
|
* DO NOT EDIT THIS FILE (ocserv-args.h)
|
||||||
*
|
*
|
||||||
* It has been AutoGen-ed March 4, 2013 at 07:36:47 PM by AutoGen 5.16
|
* It has been AutoGen-ed March 4, 2013 at 08:45:35 PM by AutoGen 5.16
|
||||||
* From the definitions ocserv-args.def
|
* From the definitions ocserv-args.def
|
||||||
* and the template file options
|
* and the template file options
|
||||||
*
|
*
|
||||||
|
|||||||
Reference in New Issue
Block a user