XrdConfig.cc

Go to the documentation of this file.

/*******************************************************************************/
/*                                                                            */
/*                          X r d C o n f i g . c c                           */
/*                                                                            */
/* (c) 2011 by the Board of Trustees of the Leland Stanford, Jr., University  */
/*   Produced by Andrew Hanushevsky for Stanford University under contract    */
/*                DE-AC02-76-SFO0515 with the Deprtment of Energy             */
/*                                                                            */
/* This file is part of the XRootD software suite.                            */
/*                                                                            */
/* XRootD is free software: you can redistribute it and/or modify it under    */
/* the terms of the GNU Lesser General Public License as published by the     */
/* Free Software Foundation, either version 3 of the License, or (at your     */
/* option) any later version.                                                 */
/*                                                                            */
/* XRootD is distributed in the hope that it will be useful, but WITHOUT      */
/* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or      */
/* FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Lesser General Public       */
/* License for more details.                                                  */
/*                                                                            */
/* You should have received a copy of the GNU Lesser General Public License   */
/* along with XRootD in a file called COPYING.LESSER (LGPL license) and file  */
/* COPYING (GPL license).  If not, see <http://www.gnu.org/licenses/>.        */
/*                                                                            */
/* The copyright holder's institutional names and contributor's names may not */
/* be used to endorse or promote products derived from this software without  */
/* specific prior written permission of the institution or contributor.       */
/******************************************************************************/
 
/*
   The default port number comes from:
   1) The command line option,
   2) The config file,
   3) The /etc/services file for service corresponding to the program name.
*/
  
#include <unistd.h>
#include <cctype>
#include <fcntl.h>
#include <pwd.h>
#include <cstdint>
#include <string>
#include <cstring>
#include <cstdio>
#include <sys/param.h>
#include <sys/resource.h>
#include <sys/types.h>
#include <sys/stat.h>
#include <sys/un.h>
#include <algorithm>
#include <limits>
 
#include "XrdVersion.hh"
 
#include "Xrd/XrdBuffer.hh"
#include "Xrd/XrdBuffXL.hh"
#include "Xrd/XrdConfig.hh"
#include "Xrd/XrdInet.hh"
#include "Xrd/XrdInfo.hh"
#include "Xrd/XrdLink.hh"
#include "Xrd/XrdLinkCtl.hh"
#include "Xrd/XrdPoll.hh"
#include "Xrd/XrdScheduler.hh"
#include "Xrd/XrdStats.hh"
#include "Xrd/XrdTrace.hh"
 
#include "XrdNet/XrdNetAddr.hh"
#include "XrdNet/XrdNetIdentity.hh"
#include "XrdNet/XrdNetIF.hh"
#include "XrdNet/XrdNetRefresh.hh"
#include "XrdNet/XrdNetSecurity.hh"
#include "XrdNet/XrdNetUtils.hh"
 
#include "XrdOuc/XrdOuca2x.hh"
#include "XrdOuc/XrdOucEnv.hh"
#include "XrdOuc/XrdOucLogging.hh"
#include "XrdOuc/XrdOucPinKing.hh"
#include "XrdOuc/XrdOucSiteName.hh"
#include "XrdOuc/XrdOucStream.hh"
#include "XrdOuc/XrdOucString.hh"
#include "XrdOuc/XrdOucUtils.hh"
 
#include "XrdSys/XrdSysError.hh"
#include "XrdSys/XrdSysFD.hh"
#include "XrdSys/XrdSysHeaders.hh"
#include "XrdSys/XrdSysLogger.hh"
#include "XrdSys/XrdSysTimer.hh"
#include "XrdSys/XrdSysUtils.hh"
 
#include "XrdTcpMonPin.hh"
 
#include "XrdTls/XrdTls.hh"
#include "XrdTls/XrdTlsContext.hh"
 
#if defined(__linux__) || defined(__GNU__)
#include <netinet/tcp.h>
#endif
#if defined(__linux__)
#include <sys/epoll.h>
#endif
#ifdef __APPLE__
#include <AvailabilityMacros.h>
#endif
 
/******************************************************************************/
/*                        G l o b a l   O b j e c t s                         */
/******************************************************************************/
 
namespace XrdGlobal
{
       XrdOucString      totalCF;
extern XrdSysLogger      Logger;
extern XrdSysError       Log;
extern XrdSysTrace       XrdTrace;
extern XrdScheduler      Sched;
extern XrdBuffManager    BuffPool;
extern XrdTlsContext    *tlsCtx;
extern XrdInet          *XrdNetTCP;
extern XrdBuffXL         xlBuff;
extern XrdTcpMonPin     *TcpMonPin;
extern int               devNull;
};
 
using namespace XrdGlobal;
 
namespace XrdNetSocketCFG
{
extern int ka_Idle;
extern int ka_Itvl;
extern int ka_Icnt;
extern int udpRefr;
 
extern XrdNetRefresh* NetRefresh;
};
  
/******************************************************************************/
/*                    F i l e   L o c a l   O b j e c t s                     */
/******************************************************************************/
 
namespace
{
XrdOucEnv  theEnv;
XrdVERSIONINFODEF(myVer, Xrd, XrdVNUMBER, XrdVERSION);
bool SSLmsgs = true;
 
void TlsError(const char *tid, const char *msg, bool sslmsg)
             {if (!sslmsg || SSLmsgs) XrdGlobal::Log.Emsg("TLS", tid, msg);}
};
  
/******************************************************************************/
/*                        S t a t i c   M e m b e r s                         */
/******************************************************************************/
  
       const char       *XrdConfig::TraceID = "Config";
 
/******************************************************************************/
/*                               d e f i n e s                                */
/******************************************************************************/
 
#define TS_Xeq(x,m)    if (!strcmp(x,var)) return m(eDest, Config);
 
#ifndef S_IAMB
#define S_IAMB  0x1FF
#endif
 
/******************************************************************************/
/*                         L o c a l   C l a s s e s                          */
/******************************************************************************/
/******************************************************************************/
/*                         X r d C o n f i g P r o t                          */
/******************************************************************************/
 
class XrdConfigProt
{
public:
 
XrdConfigProt  *Next;
char           *proname;
char           *libpath;
char           *parms;
 
int             numP;
union {int      port;
       int      portVec[XrdProtLoad::PortoMax];
      };
union {bool     dotls;
       bool     tlsVec[XrdProtLoad::PortoMax];
      };
 
bool            AddPort(int pnum, bool isTLS)
                       {for (int i = 0; i < numP; i++)
                            if (pnum == portVec[i])
                               {tlsVec[i] = isTLS; return true;}
                        if (numP >= (XrdProtLoad::PortoMax)) return false;
                        portVec[numP] = pnum; tlsVec[numP] = isTLS;
                        numP++;
                        return true;
                       }
 
void             Reset(char *ln, char *pp, int np=-1, bool to=false)
                      {if (libpath) free(libpath);
                       libpath = ln;
                       if (parms)   free(parms);
                       parms = pp;
                       memset(portVec, 0, sizeof(portVec));
                       port = np;
                       memset(tlsVec, 0, sizeof(tlsVec));
                       dotls = to;
                       numP = 1;
                      }
 
                XrdConfigProt(char *pn, char *ln, char *pp, int np=-1,
                              bool to=false)
                    : Next(0), proname(pn), libpath(ln), parms(pp), numP(1)
                    {memset(portVec, 0, sizeof(portVec)); port = np;
                     memset(tlsVec, 0, sizeof(tlsVec)); dotls = to;
                    }
 
               ~XrdConfigProt()
                    {free(proname);
                     if (libpath) free(libpath);
                     if (parms)   free(parms);
                    }
};
 
/******************************************************************************/
/*                         X r d T c p M o n I n f o                          */
/******************************************************************************/
 
class XrdTcpMonInfo
{
public:
 
XrdOucPinKing<XrdTcpMonPin> KingPin;
 
      XrdTcpMonInfo(const char *drctv, const char *cfn, XrdSysError &errR)
                   : KingPin(drctv, theEnv, errR, &myVer)
                   {theEnv.Put("configFN", cfn);}
 
     ~XrdTcpMonInfo() {}
 
XrdOucEnv theEnv;
};
  
/******************************************************************************/
/*                           C o n s t r u c t o r                            */
/******************************************************************************/
  
XrdConfig::XrdConfig()
{
 
// Preset all variables with common defaults
//
   PortTCP  = -1;
   PortUDP  = -1;
   PortTLS  = -1;
   ConfigFN = 0;
   tmoInfo  = 0;
   myInsName= 0;
   mySitName= 0;
   AdminPath= strdup("/tmp");
   HomePath = 0;
   PidPath  = strdup("/tmp");
   tlsCert  = 0;
   tlsKey   = 0;
   caDir    = 0;
   caFile   = 0;
   AdminMode= S_IRWXU;
   HomeMode = S_IRWXU;
   Police   = 0;
   Net_Opts = XRDNET_KEEPALIVE;
   TLS_Blen = 0;  // Accept OS default (leave Linux autotune in effect)
   TLS_Opts = XRDNET_KEEPALIVE | XRDNET_USETLS;
   repDest[0] = 0;
   repDest[1] = 0;
   repInt     = 600;
   ppNet      = 0;
   tlsOpts    = 9ULL | XrdTlsContext::servr | XrdTlsContext::logVF;
   tlsNoVer   = false;
   tlsNoCAD   = true;
   NetADM     = 0;
   coreV      = 1;
   Specs      = 0;
   isStrict   = false;
   maxFD      = 256*1024;  // 256K default
 
   Firstcp = Lastcp = 0;
 
   ProtInfo.eDest   = &Log;             // Stable -> Error Message/Logging Handler
   ProtInfo.NetTCP  = 0;                // Stable -> Network Object
   ProtInfo.BPool   = &BuffPool;        // Stable -> Buffer Pool Manager
   ProtInfo.Sched   = &Sched;           // Stable -> System Scheduler
   ProtInfo.ConfigFN= 0;                // We will fill this in later
   ProtInfo.Stats   = 0;                // We will fill this in later
   ProtInfo.AdmPath = AdminPath;        // Stable -> The admin path
   ProtInfo.AdmMode = AdminMode;        // Stable -> The admin path mode
   ProtInfo.theEnv  = &theEnv;          // Additional information
   ProtInfo.xrdFlags= 0;                // Additional information
 
   ProtInfo.Format   = XrdFORMATB;
   memset(ProtInfo.rsvd3, 0, sizeof(ProtInfo.rsvd3));
   ProtInfo.WSize    = 0;
   ProtInfo.ConnMax  = -1;     // Max       connections (fd limit)
   ProtInfo.readWait = 3*1000; // Wait time for data before we reschedule
   ProtInfo.idleWait = 0;      // Seconds connection may remain idle (0=off)
   ProtInfo.hailWait =30*1000; // Wait time for data before we drop connection
   ProtInfo.DebugON  = 0;      // 1 if started with -d
   ProtInfo.argc     = 0;
   ProtInfo.argv     = 0;
   ProtInfo.tlsPort  = 0;
   ProtInfo.tlsCtx   = 0;
   ProtInfo.totalCF  = &totalCF;
 
   XrdNetAddr::SetCache(3*60*60); // Cache address resolutions for 3 hours
 
   // This may reset the NPROC resource limit, which is done here as we
   // expect to be operating as a daemon. We set the argument limlower=true
   // to potentially set a more restrictive limit than the current one.
   Sched.setNproc(true);
}
  
/******************************************************************************/
/*                             C o n f i g u r e                              */
/******************************************************************************/
  
int XrdConfig::Configure(int argc, char **argv)
{
/*
  Function: Establish configuration at start up time.
 
  Input:    None.
 
  Output:   0 upon success or !0 otherwise.
*/
   const char *xrdInst="XRDINSTANCE=";
 
   int retc, NoGo = 0, clPort = -1;
   const char *temp;
   char c, buff[512], *dfltProt, *libProt = 0;
   uid_t myUid = 0;
   gid_t myGid = 0;
   extern char *optarg;
   extern int optind, opterr;
   struct XrdOucLogging::configLogInfo LogInfo;
   int pipeFD[2] = {-1, -1};
   const char *pidFN = 0;
   static const int myMaxc = 80;
   char **urArgv, *myArgv[myMaxc], argBuff[myMaxc*3+8];
   char *argbP = argBuff, *argbE = argbP+sizeof(argBuff)-4;
   char *ifList = 0;
   int   myArgc = 1, urArgc = argc, i;
   bool noV6, ipV4 = false, ipV6 = false, rootChk = true, optbg = false;
 
// Reconstruct the command line so we can put it in the log
//
   XrdOucString CmdLine(argv[0]);
   for (int k = 1; k < argc; k++)
       {CmdLine += ' '; CmdLine += argv[k];}
 
// Obtain the program name we will be using
//
    retc = strlen(argv[0]);
    while(retc--) if (argv[0][retc] == '/') break;
    myProg = &argv[0][retc+1];
 
// Setup the initial required protocol. The program name matches the protocol
// name but may be arbitrarily suffixed. We need to ignore this suffix. So we
// look for it here and it it exists we duplicate argv[0] (yes, loosing some
// bytes - sorry valgrind) without the suffix.
//
  {char *p = dfltProt = strdup(myProg);
   while(*p && (*p == '.' || *p == '-')) p++;
   if (*p)
      {char *dot = index(p, '.'), *dash = index(p, '-');
       if (dot  && (dot < dash || !dash)) p = dot;
          else if (dash) p = dash;
                  else   p = 0;
       if (p) *p = '\0';
            if (!strcmp("xrootd", dfltProt)) dfltProt[5] = 0;
       else if (!strcmp("cmsd",   dfltProt)) dfltProt[3] = 0;
      }
  }
   myArgv[0] = argv[0];
 
// Prescan the argument list to see if there is a passthrough option. In any
// case, we will set the ephemeral argv/arg in the environment.
//
  i = 1;
  while(i < argc)
      {if (*(argv[i]) == '-' && *(argv[i]+1) == '+')
          {int n = strlen(argv[i]+2), j = i+1, k = 1;
           if (urArgc == argc) urArgc = i;
           if (n) memcpy(buff, argv[i]+2, (n > 256 ? 256 : n));
           strcpy(&(buff[n]), ".argv**");
           while(j < argc && (*(argv[j]) != '-' || *(argv[j]+1) != '+')) j++;
           urArgv = new char*[j-i+1];
           urArgv[0] = argv[0];
           i++;
           while(i < j) urArgv[k++] = argv[i++];
           urArgv[k] = 0;
           theEnv.PutPtr(buff, urArgv);
           strcpy(&(buff[n]), ".argc");
           theEnv.PutInt(buff, static_cast<long>(k));
          } else i++;
      }
   theEnv.PutPtr("argv[0]", argv[0]);
 
// Process the options. Note that we cannot passthrough long options or
// options that take arguments because getopt permutes the arguments.
//
   opterr = 0;
   if (argc > 1 && '-' == *argv[1]) 
      while ((c = getopt(urArgc,argv,":a:A:bc:dhHI:k:l:L:n:N:p:P:R:s:S:vw:W:z"))
             && ((unsigned char)c != 0xff))
     { switch(c)
       {
       case 'a': if (AdminPath) free(AdminPath);
                 AdminPath = strdup(optarg);
                 AdminMode = ProtInfo.AdmMode = S_IRWXU;
                 ProtInfo.xrdFlags |= XrdProtocol_Config::admPSet;
                 break;
       case 'A': if (AdminPath) free(AdminPath);
                 AdminPath = strdup(optarg);
                 AdminMode = ProtInfo.AdmMode = S_IRWXU | S_IRWXG;
                 ProtInfo.xrdFlags |= XrdProtocol_Config::admPSet;
                 break;
       case 'b': optbg = true;
                 break;
       case 'c': if (ConfigFN) free(ConfigFN);
                 ConfigFN = strdup(optarg);
                 break;
       case 'd': XrdTrace.What |= TRACE_ALL;
                 ProtInfo.DebugON = 1;
                 XrdOucEnv::Export("XRDDEBUG",  "1");
                 break;
       case 'h': Usage(0);
                 break;
       case 'H': Usage(-1);
                 break;
       case 'I':      if (!strcmp("v4", optarg)) {ipV4 = true;  ipV6 = false;}
                 else if (!strcmp("v6", optarg)) {ipV4 = false; ipV6 = true;}
                 else {Log.Emsg("Config", "Invalid -I argument -",optarg);
                       Usage(1);
                      }
                 break;
       case 'k': if (!(LogInfo.keepV = Log.logger()->ParseKeep(optarg)))
                    {Log.Emsg("Config","Invalid -k argument -",optarg);
                     Usage(1);
                    }
                 break;
       case 'l': LogInfo.logArg = optarg;
                 break;
       case 'L': if (!*optarg)
                    {Log.Emsg("Config", "Protocol library path not specified.");
                     Usage(1);
                    }
                 if (libProt) free(libProt);
                 libProt = strdup(optarg);
                 break;
       case 'n': myInsName = (!strcmp(optarg,"anon")||!strcmp(optarg,"default")
                           ? 0 : optarg);
                 break;
       case 'N': XrdNetIdentity::SetFQN(optarg);
                 break;
       case 'p': if ((clPort = XrdOuca2x::a2p(Log,"tcp",optarg)) < 0) Usage(1);
                 break;
       case 'P': if (dfltProt) free(dfltProt);
                 dfltProt = strdup(optarg);
                 break;
       case 'R': if (!(getUG(optarg, myUid, myGid))) Usage(1);
                 rootChk = false;
                 break;
       case 's': pidFN = optarg;
                 break;
       case 'S': mySitName = optarg;
                 break;
       case ':': buff[0] = '-'; buff[1] = optopt; buff[2] = 0;
                 Log.Emsg("Config", buff, "parameter not specified.");
                 Usage(1);
                 break;
       case 'v': std::cerr <<XrdVSTRING <<std::endl;
                 _exit(0);
                 break;
       case 'w': if (HomePath) free(HomePath);
                 HomePath = strdup(optarg);
                 HomeMode = S_IRWXU;
                 Specs |= hpSpec;
                 break;
       case 'W': if (HomePath) free(HomePath);
                 HomePath = strdup(optarg);
                 HomeMode = S_IRWXU | S_IRGRP | S_IXGRP;
                 Specs |= hpSpec;
                 break;
       case 'z': LogInfo.hiRes = true;
                 break;
 
       default: if (optopt == '-' && *(argv[optind]+1) == '-')
                   {Log.Emsg("Config", "Long options are not supported.");
                    Usage(1);
                   }
                if (myArgc >= myMaxc || argbP >= argbE)
                   {Log.Emsg("Config", "Too many command line arguments.");
                    Usage(1);
                   }
                myArgv[myArgc++] = argbP;
                *argbP++ = '-'; *argbP++ = optopt; *argbP++ = 0;
                break;
       }
     }
 
// If an adminpath specified, make sure it's absolute
//
   if ((ProtInfo.xrdFlags & XrdProtocol_Config::admPSet) && *AdminPath != '/')
      {Log.Emsg("Config", "Command line adminpath is not absolute.");
       exit(17);
      }
 
// If an homepath specified, make sure it's absolute
//
   if (HomePath && *HomePath != '/')
      {Log.Emsg("Config", "Command line home path is not absolute.");
       exit(17);
      }
 
// If the configuration file is relative to where we are, get the absolute
// path as we may be changing the home path. This also starts capturing.
//
   if (ConfigFN) setCFG(true);
 
// The first thing we must do is to set the correct networking mode
//
   noV6 = XrdNetAddr::IPV4Set();
        if (ipV4) XrdNetAddr::SetIPV4();
   else if (ipV6){if (noV6) Log.Say("Config warning: ipV6 appears to be broken;"
                                    " forced ipV6 mode not advised!");
                  XrdNetAddr::SetIPV6();
                 }
   else if (noV6) Log.Say("Config warning: ipV6 is misconfigured or "
                          "unavailable; reverting to ipV4.");
 
// Set the site name if we have one
//
   if (mySitName) mySitName = XrdOucSiteName::Set(mySitName, 63);
 
// Drop into non-privileged state if so requested
//
   if (myGid && setegid(myGid))
      {Log.Emsg("Config", errno, "set effective gid"); exit(17);}
   if (myUid && seteuid(myUid))
      {Log.Emsg("Config", errno, "set effective uid"); exit(17);}
 
// Prohibit this program from executing as superuser unless -R was specified.
//
   if (rootChk && geteuid() == 0)
      {Log.Emsg("Config", "Security reasons prohibit running as "
                "superuser; program is terminating.");
       _exit(8);
      }
 
// Pass over any parameters
//
   if (urArgc-optind+2 >= myMaxc)
      {Log.Emsg("Config", "Too many command line arguments.");
       Usage(1);
      }
   for ( ; optind < urArgc; optind++) myArgv[myArgc++] = argv[optind];
 
// Record the actual arguments that we will pass on
//
   myArgv[myArgc] = 0;
   ProtInfo.argc = myArgc;
   ProtInfo.argv = myArgv;
 
// Resolve background/foreground issues
//
   if (optbg)
   {
#ifdef WIN32
      XrdOucUtils::Undercover(&Log, !LogInfo.logArg);
#else
      if (pipe( pipeFD ) == -1)
         {Log.Emsg("Config", errno, "create a pipe"); exit(17);}
      XrdOucUtils::Undercover(Log, !LogInfo.logArg, pipeFD);
#endif
   }
 
// Get the full host name. We must define myIPAddr here because we may need to
// run in v4 mode and that doesn't get set until after the options are scanned.
//
   static XrdNetAddr *myIPAddr = new XrdNetAddr((int)0);
   auto envName = getenv("XRDHOST");
   const char *ipAddrName;
   if (envName) {
      myName = envName;
      XrdOucEnv::Export("OVERRIDEXRDHOST", myName.c_str());
   } else if ((ipAddrName = myIPAddr->Name(0, &temp))) {
      myName = ipAddrName;
   } else {
      myName = "";
   }
 
// Get our IP address and FQN
//
   ProtInfo.myName = myName.c_str();
   ProtInfo.myAddr = myIPAddr->SockAddr();
   ProtInfo.myInst = XrdOucUtils::InstName(myInsName);
   ProtInfo.myProg = myProg;
 
// Set the Environmental variable to hold the instance name
// XRDINSTANCE=<pgm> <instance name>@<host name>
//                 XrdOucEnv::Export("XRDINSTANCE")
//
   sprintf(buff,"%s%s %s@%s", xrdInst, myProg, ProtInfo.myInst, myName.c_str());
   myInstance = strdup(buff);
   putenv(myInstance);   // XrdOucEnv::Export("XRDINSTANCE",...)
   myInstance += strlen(xrdInst);
   XrdOucEnv::Export("XRDHOST", myName.c_str());
   XrdOucEnv::Export("XRDNAME", ProtInfo.myInst);
   XrdOucEnv::Export("XRDPROG", myProg);
 
// Bind the log file if we have one
//
   if (LogInfo.logArg)
      {LogInfo.xrdEnv = &theEnv;
       LogInfo.iName  = myInsName;
       LogInfo.cfgFn  = ConfigFN;
       if (!XrdOucLogging::configLog(Log, LogInfo)) _exit(16);
       Log.logger()->AddMsg(CmdLine.c_str());
       Log.logger()->AddMsg(XrdBANNER);
      }
 
// We now test for host name. In theory, we should always get some kind of name.
// We can't really continue without some kind of name at this point. Note that
// vriable temp should still be valid from the previous NetAddr call.
//
   if (myName.empty())
      {Log.Emsg("Config", "Unable to determine host name; ",
                           (temp ? temp : "reason unknown"),
                           "; execution terminated.");
       _exit(16);
      }
 
// Tell NetIF what logger to use as it's been properly setup by now.
//
   XrdNetIF::SetMsgs(&Log);
 
// Put out the herald
//
   strcpy(buff, "Starting on ");
   retc = strlen(buff);
   XrdSysUtils::FmtUname(buff+retc, sizeof(buff)-retc);
   Log.Say(0, buff);
   Log.Say(0, CmdLine.c_str());
   Log.Say(XrdBANNER);
 
// Verify that we have a real name. We've had problems with people setting up
// bad /etc/hosts files that can cause connection failures if "allow" is used.
// Otherwise, determine our domain name.
//
   if (!myIPAddr->isRegistered())
      {Log.Emsg("Config",myName.c_str(),"does not appear to be registered in the DNS.");
       Log.Emsg("Config","Verify that the '/etc/hosts' file is correct and "
                         "this machine is registered in DNS.");
       Log.Emsg("Config", "Execution continues but connection failures may occur.");
       myDomain = 0;
      } else if (!(myDomain = index(myName.c_str(), '.')))
                Log.Say("Config warning: this hostname, ", myName.c_str(),
                            ", is registered without a domain qualification.");
 
// Setup the initial required protocol.
//
   Firstcp = Lastcp = new XrdConfigProt(strdup(dfltProt), libProt, 0);
 
// Let start it up!
//
   Log.Say("++++++ ", myInstance, " initialization started.");
 
// Allocate /dev/null as we need it and can't live without it
//
   devNull = XrdSysFD_Open("/dev/null", O_RDONLY);
   if (devNull < 0)
      {Log.Emsg("Config", errno, "open '/dev/null' which is required!");
       NoGo = 1;
      }
 
// Process the configuration file, if one is present
//
   if (ConfigFN)
      {Log.Say("Config using configuration file ", ConfigFN);
       ProtInfo.ConfigFN = ConfigFN;
       NoGo = ConfigProc();
      }
   if (clPort >= 0) PortTCP = clPort;
   if (ProtInfo.DebugON) 
      {XrdTrace.What = TRACE_ALL;
       XrdSysThread::setDebug(&Log);
      }
 
// Setup the admin path now
//
   NoGo |= SetupAPath();
 
// If tls enabled, set it up. We skip this if we failed to avoid confusing msgs
//
   if (!NoGo)
      {if (!tlsCert) ProtInfo.tlsCtx= 0;
          else {Log.Say("++++++ ", myInstance, " TLS initialization started.");
                if (SetupTLS())
                   {Log.Say("------ ",myInstance," TLS initialization ended.");
                    if ((ProtInfo.tlsCtx = XrdGlobal::tlsCtx))
                       theEnv.PutPtr("XrdTlsContext*", XrdGlobal::tlsCtx);
                   } else {
                    NoGo = 1;
                    Log.Say("------ ",myInstance," TLS initialization failed.");
                   }
               }
      }
 
// If there is TLS port verify that it can be used. We ignore this if we
// will fail anyway so as to not issue confusing messages.
//
   if (!NoGo)
      {if (PortTLS > 0 && !XrdGlobal::tlsCtx)
          {Log.Say("Config TLS port specification ignored; TLS not configured!");
           PortTLS = -1;
          } else {
           ProtInfo.tlsCtx  = XrdGlobal::tlsCtx;
           ProtInfo.tlsPort = (PortTLS > 0 ? PortTLS : 0);
         }
      }
 
// Put largest buffer size in the env
//
   theEnv.PutInt("MaxBuffSize", XrdGlobal::xlBuff.MaxSize());
 
// Export the network interface list at this point
//
   if (ppNet && XrdNetIF::GetIF(ifList, 0, true))
      XrdOucEnv::Export("XRDIFADDRS",ifList);
 
// Configure network routing
//
   if (!XrdInet::netIF.SetIF(myIPAddr, ifList))
      {Log.Emsg("Config", "Unable to determine interface addresses!");
       NoGo = 1;
      }
 
// If we have an instance name change the working directory
//
   if ((myInsName || HomePath)
   &&  !XrdOucUtils::makeHome(Log, myInsName, HomePath, HomeMode)) NoGo = 1;
 
// Start the UDP network address refresher.
//
   XrdNetRefresh::Start(&Logger, &Sched);
 
// Create the pid file
//
   if (!PidFile(pidFN, optbg)) NoGo = 1;
 
// Establish a manifest file for auto-collection
//
   if (!NoGo) Manifest(pidFN);
 
// Now initialize the protocols and other stuff
//
   if (!NoGo) NoGo = Setup(dfltProt, libProt);
 
// End config capture
//
   setCFG(false);
 
// If we have a tcpmon plug-in try loading it now. We won't do that unless
// tcp monitoring was enabled by the monitoring framework.
//
   if (tmoInfo && !NoGo)
      {void *theGS = theEnv.GetPtr("TcpMon.gStream*");
       if (!theGS) Log.Say("Config warning: TCP monitoring not enabled; "
                   "tcpmonlib plugin not loaded!");
           else {tmoInfo->theEnv.PutPtr("TcpMon.gStream*", theGS);
                 TcpMonPin = tmoInfo->KingPin.Load("TcpMonPin");
                 if (!TcpMonPin) NoGo = 1;
                }
      }
 
   // if we call this it means that the daemon has forked and we are
   // in the child process
#ifndef WIN32
   if (optbg)
   {
      int status = NoGo ? 1 : 0;
      if(write( pipeFD[1], &status, sizeof( status ) )) {};
      close( pipeFD[1]);
   }
#endif
 
// All done, close the stream and return the return code.
//
   temp = (NoGo ? " initialization failed." : " initialization completed.");
   sprintf(buff, "%s:%d", myInstance, PortTCP);
   Log.Say("------ ", buff, temp);
   if (LogInfo.logArg)
      {strcat(buff, " running ");
       retc = strlen(buff);
       XrdSysUtils::FmtUname(buff+retc, sizeof(buff)-retc);
       Log.logger()->AddMsg(buff);
      }
   return NoGo;
}
 
/******************************************************************************/
/*                             C o n f i g X e q                              */
/******************************************************************************/
 
int XrdConfig::ConfigXeq(char *var, XrdOucStream &Config, XrdSysError *eDest)
{
   int dynamic;
 
   // Determine whether is is dynamic or not
   //
   if (eDest) dynamic = 1;
      else   {dynamic = 0; eDest = &Log;}
 
   // Process common items
   //
   TS_Xeq("buffers",       xbuf);
   TS_Xeq("network",       xnet);
   TS_Xeq("sched",         xsched);
   TS_Xeq("trace",         xtrace);
 
   // Process items that can only be processed once
   //
   if (!dynamic)
   {
   TS_Xeq("adminpath",     xapath);
   TS_Xeq("allow",         xallow);
   TS_Xeq("homepath",      xhpath);
   TS_Xeq("maxfd",         xmaxfd);
   TS_Xeq("pidpath",       xpidf);
   TS_Xeq("port",          xport);
   TS_Xeq("protocol",      xprot);
   TS_Xeq("report",        xrep);
   TS_Xeq("sitename",      xsit);
   TS_Xeq("tcpmonlib",     xtcpmon);
   TS_Xeq("timeout",       xtmo);
   TS_Xeq("tls",           xtls);
   TS_Xeq("tlsca",         xtlsca);
   TS_Xeq("tlsciphers",    xtlsci);
   }
 
   // No match found, complain.
   //
   eDest->Say("Config warning: ignoring unknown xrd directive '",var,"'.");
   Config.Echo();
   return 0;
}
 
/******************************************************************************/
/*                     P r i v a t e   F u n c t i o n s                      */
/******************************************************************************/
/******************************************************************************/
/*                               A S o c k e t                                */
/******************************************************************************/
  
int XrdConfig::ASocket(const char *path, const char *fname, mode_t mode)
{
   struct sockaddr_un unixvar;
   int  plen = strlen(path), flen = strlen(fname);
 
// Make sure we can fit everything in our buffer
//
   if ((plen + flen + 3) > (int)sizeof(unixvar.sun_path))
      {Log.Emsg("Config", "admin path", path, "too long");
       return 1;
      }
 
// *!*!* At this point we do not yet support the admin path for xrd.
// sp we comment out all of the following code.
 
/*
// Construct the actual socket name
//
  char sokpath[sizeof(Unix.sun_path)];
 
  if (sokpath[plen-1] != '/') sokpath[plen++] = '/';
  strcpy(&sokpath[plen], fname);
 
// Create an admin network
//
   NetADM = new XrdInet(&Log);
   if (myDomain) NetADM->setDomain(myDomain);
 
// Bind the netwok to the named socket
//
   if (!NetADM->Bind(sokpath)) return 1;
 
// Set the mode and return
//
   chmod(sokpath, mode); // This may fail on some platforms
*/
   return 0;
}
 
/******************************************************************************/
/*                            C o n f i g P r o c                             */
/******************************************************************************/
  
int XrdConfig::ConfigProc()
{
  char *var;
  int  cfgFD, retc, NoGo = 0;
  XrdOucEnv myEnv;
  XrdOucStream Config(&Log, myInstance, &myEnv, "=====> ");
 
// Try to open the configuration file.
//
   if ( (cfgFD = open(ConfigFN, O_RDONLY, 0)) < 0)
      {Log.Emsg("Config", errno, "open config file", ConfigFN);
       return 1;
      }
   Config.Attach(cfgFD);
 
// Now start reading records until eof.
//
   while((var = Config.GetMyFirstWord()))
        if (!strncmp(var, "xrd.", 4)
        ||  !strcmp (var, "all.adminpath")
        ||  !strcmp (var, "all.pidpath")
        ||  !strcmp (var, "all.sitename" ))
           if (ConfigXeq(var+4, Config)) {Config.Echo(); NoGo = 1;}
 
// Now check if any errors occurred during file i/o
//
   if ((retc = Config.LastError()))
      NoGo = Log.Emsg("Config", retc, "read config file", ConfigFN);
   Config.Close();
 
// Return final return code
//
   return NoGo;
}
 
/******************************************************************************/
/*                                g e t N e t                                 */
/******************************************************************************/
 
XrdInet *XrdConfig::getNet(int port, bool isTLS)
{
   int the_Opts, the_Blen;
 
// Try to find an existing network for this port
//
   for (int i = 0; i < (int)NetTCP.size(); i++)
       if (port == NetTCP[i]->Port()) return NetTCP[i];
 
// Create a new network for this port
//
   XrdInet *newNet = new XrdInet(&Log, Police);
   NetTCP.push_back(newNet);
 
// Set options
//
   if (isTLS)
      {the_Opts = TLS_Opts; the_Blen = TLS_Blen;
      } else {
       the_Opts = Net_Opts; the_Blen = Net_Blen;
      }
   if (the_Opts || the_Blen) newNet->setDefaults(the_Opts, the_Blen);
 
// Set the domain if we have one
//
   if (myDomain) newNet->setDomain(myDomain);
 
// Attempt to bind to this socket.
//
   if (newNet->BindSD(port, "tcp") == 0) return newNet;
   delete newNet;
   return 0;
}
  
/******************************************************************************/
/*                                 g e t U G                                  */
/******************************************************************************/
  
int XrdConfig::getUG(char *parm, uid_t &newUid, gid_t &newGid)
{
   struct passwd *pp;
 
// Get the userid entry
//
   if (!(*parm))
      {Log.Emsg("Config", "-R user not specified."); return 0;}
 
   if (isdigit(*parm))
      {if (!(newUid = atol(parm)))
          {Log.Emsg("Config", "-R", parm, "is invalid"); return 0;}
       pp = getpwuid(newUid);
      }
      else pp = getpwnam(parm);
 
// Make sure it is valid and acceptable
//
   if (!pp) 
      {Log.Emsg("Config", errno, "retrieve -R user password entry");
       return 0;
      }
   if (!(newUid = pp->pw_uid))
      {Log.Emsg("Config", "-R", parm, "is still unacceptably a superuser!");
       return 0;
      }
   newGid = pp->pw_gid;
   return 1;
}
 
/******************************************************************************/
/*                              M a n i f e s t                               */
/******************************************************************************/
  
void XrdConfig::Manifest(const char *pidfn)
{
   const char *Slash;
   char envBuff[8192], pwdBuff[2048], manBuff[1024], *pidP, *sP, *xP;
   int envFD, envLen;
 
// Get the current working directory
//
   if (!getcwd(pwdBuff, sizeof(pwdBuff)))
      {Log.Emsg("Config", "Unable to get current working directory!");
       return;
      }
 
// The above is the authoratative home directory, so recorded here.
//
   if (HomePath) free(HomePath);
   HomePath = strdup(pwdBuff);
 
// Prepare for symlinks
//
   strcpy(envBuff, ProtInfo.AdmPath);
   envLen = strlen(envBuff);
   if (envBuff[envLen-1] != '/') {envBuff[envLen] = '/'; envLen++;}
   strcpy(envBuff+envLen, ".xrd/");
   xP = envBuff+envLen+5;
 
// Create a symlink to the configuration file
//
   if ((sP = getenv("XRDCONFIGFN")))
      {sprintf(xP, "=/conf/%s.cf", myProg);
       XrdOucUtils::ReLink(envBuff, sP);
      }
 
// Create a symlink to where core files will be found
//
   sprintf(xP, "=/core/%s", myProg);
   XrdOucUtils::ReLink(envBuff, pwdBuff);
 
// Create a symlink to where log files will be found
//
   if ((sP = getenv("XRDLOGDIR")))
      {sprintf(xP, "=/logs/%s", myProg);
       XrdOucUtils::ReLink(envBuff, sP);
      }
 
// Create a symlink to out proc information (Linux only)
//
#ifdef __linux__
   sprintf(xP, "=/proc/%s", myProg);
   sprintf(manBuff, "/proc/%d", getpid());
   XrdOucUtils::ReLink(envBuff, manBuff);
#endif
 
// Create environment string
//
   envLen = snprintf(envBuff, sizeof(envBuff), "pid=%d&host=%s&inst=%s&ver=%s"
                     "&home=%s&cfgfn=%s&cwd=%s&apath=%s&logfn=%s",
                     static_cast<int>(getpid()), ProtInfo.myName,
                     ProtInfo.myInst, XrdVSTRING, HomePath,
                     (getenv("XRDCONFIGFN") ? getenv("XRDCONFIGFN") : ""),
                     pwdBuff, ProtInfo.AdmPath, Log.logger()->xlogFN());
 
// Find out where we should write this
//
   if (pidfn && (Slash = rindex(pidfn, '/')))
      {strncpy(manBuff, pidfn, Slash-pidfn); pidP = manBuff+(Slash-pidfn);}
      else {strcpy(manBuff, ProtInfo.AdmPath); pidP = manBuff+strlen(ProtInfo.AdmPath);}
 
// Construct the pid file name for ourselves
//
   snprintf(pidP, sizeof(manBuff)-(pidP-manBuff), "/%s.%s.env",
                     ProtInfo.myProg, ProtInfo.myInst);
   theEnv.Put("envFile", manBuff);
 
// Open the file
//
   if ((envFD = open(manBuff, O_WRONLY|O_CREAT|O_TRUNC, 0664)) < 0)
      {Log.Emsg("Config", errno, "create envfile", manBuff);
       return;
      }
 
// Write out environmental information
//
   if (write(envFD, envBuff, envLen) < 0)
      Log.Emsg("Config", errno, "write to envfile", manBuff);
   close(envFD);
}
 
/******************************************************************************/
/*                               P i d F i l e                                */
/******************************************************************************/
  
bool XrdConfig::PidFile(const char *clpFN, bool optbg)
{
   int rc, xfd;
   char *ppath, buff[32], pidFN[1200];
   const char *xop = 0;
 
// If a command line pidfn was specified, we must successfully write it
// if we are in background mode. Otherwise, we simply continue.
//
   if (clpFN && !XrdOucUtils::PidFile(Log, clpFN) && optbg) return false;
 
// Generate the old-style pidpath we will use
//
   ppath=XrdOucUtils::genPath(PidPath,XrdOucUtils::InstName(-1));
 
// Create the path if it does not exist and write out the pid
//
   if ((rc = XrdOucUtils::makePath(ppath,XrdOucUtils::pathMode)))
      {xop = "create"; snprintf(pidFN, sizeof(pidFN), "%s", ppath); errno = rc;}
      else {snprintf(pidFN, sizeof(pidFN), "%s/%s.pid", ppath, myProg);
 
           if ((xfd = open(pidFN, O_WRONLY|O_CREAT|O_TRUNC,0644)) < 0)
              xop = "open";
              else {if (write(xfd,buff,snprintf(buff,sizeof(buff),"%d",
                        static_cast<int>(getpid()))) < 0) xop = "write";
                    close(xfd);
                   }
           }
 
// All done
//
   free(ppath);
   if (xop) Log.Emsg("Config", errno, xop, pidFN);
   return true;
}
 
/******************************************************************************/
/*                                s e t C F G                                 */
/******************************************************************************/
  
void XrdConfig::setCFG(bool start)
{
 
// If there is no config file there is nothing to do
//
   if (!ConfigFN || !(*ConfigFN))
      {if (ConfigFN)
          {free(ConfigFN);
           ConfigFN = 0;
          }
       return;
      }
 
// If ending, post process the config capture
//
   if (!start)
      {XrdOucStream::Capture((XrdOucString *)0);
       if (totalCF.length())
          {char *temp = (char *)malloc(totalCF.length()+1);
           strcpy(temp, totalCF.c_str());
           totalCF.resize();
           totalCF = temp;
           free(temp);
          }
       return;
      }
 
// Prefix current working directory to the config file if not absolute
//
   if (*ConfigFN != '/')
      {char cwdBuff[1024];
       if (getcwd(cwdBuff,sizeof(cwdBuff)-strlen(ConfigFN)-2))
          {int n = strlen(cwdBuff);
           if (cwdBuff[n-1] != '/') cwdBuff[n++] = '/';
           strcpy(cwdBuff+n, ConfigFN);
           free(ConfigFN);
           ConfigFN = strdup(cwdBuff);
          }
      }
 
// Export result
//
   XrdOucEnv::Export("XRDCONFIGFN", ConfigFN);
 
// Setup capturing for the XrdOucStream that will be used by all others to
// process config files.
//
   XrdOucStream::Capture(&totalCF);
   totalCF.resize(1024*1024);
   const char *cvec[] = { "*** ", myProg, " config from '", ConfigFN, "':", 0 };
   XrdOucStream::Capture(cvec);
}
 
/******************************************************************************/
/*                                s e t F D L                                 */
/******************************************************************************/
  
int XrdConfig::setFDL()
{
   struct rlimit rlim;
   char buff[100];
 
// Get the resource limit
//
   if (getrlimit(RLIMIT_NOFILE, &rlim) < 0)
      return Log.Emsg("Config", errno, "get FD limit");
 
// Set the limit to the maximum allowed
//
   if (rlim.rlim_max == RLIM_INFINITY || (isStrict && rlim.rlim_max > maxFD))
      rlim.rlim_cur = maxFD;
      else rlim.rlim_cur = rlim.rlim_max;
#if (defined(__APPLE__) && defined(MAC_OS_X_VERSION_10_5))
   if (rlim.rlim_cur > OPEN_MAX) rlim.rlim_max = rlim.rlim_cur = OPEN_MAX;
#endif
#if defined(__linux__)
// Setting a limit beyond this value on Linux is guaranteed to fail during epoll_wait()
   unsigned int epoll_max_fd = (INT_MAX / sizeof(struct epoll_event));
   if (rlim.rlim_cur > (rlim_t)epoll_max_fd) rlim.rlim_max = rlim.rlim_cur = epoll_max_fd;
#endif
   if (setrlimit(RLIMIT_NOFILE, &rlim) < 0)
      return Log.Emsg("Config", errno,"set FD limit");
 
// Obtain the actual limit now
//
   if (getrlimit(RLIMIT_NOFILE, &rlim) < 0)
      return Log.Emsg("Config", errno, "get FD limit");
 
// Establish operating limit
//
   ProtInfo.ConnMax = rlim.rlim_cur;
   sprintf(buff, "%d", ProtInfo.ConnMax);
   Log.Say("Config maximum number of connections restricted to ", buff);
 
// Set core limit and but Solaris
//
#if !defined( __solaris__ ) && defined(RLIMIT_CORE)
   if (coreV >= 0)
      {if (getrlimit(RLIMIT_CORE, &rlim) < 0)
          Log.Emsg("Config", errno, "get core limit");
          else {rlim.rlim_cur = (coreV ? rlim.rlim_max : 0);
                if (setrlimit(RLIMIT_CORE, &rlim) < 0)
                   Log.Emsg("Config", errno,"set core limit");
               }
      }
#endif
 
// The scheduler will have already set the thread limit. We just report it
//
#if ( defined(__linux__) || defined(__GNU__) || (defined(__FreeBSD_kernel__) && defined(__GLIBC__)) ) && defined(RLIMIT_NPROC)
 
// Obtain the actual limit now (Scheduler::setNproc may change this)
//
   if (getrlimit(RLIMIT_NPROC, &rlim) < 0)
      return Log.Emsg("Config", errno, "get thread limit");
 
// Establish operating limit
//
   int nthr = static_cast<int>(rlim.rlim_cur);
   if (nthr < 8192 || ProtInfo.DebugON)
      {sprintf(buff, "%d", static_cast<int>(rlim.rlim_cur));
       Log.Say("Config maximum number of threads restricted to ", buff);
      }
#endif
 
   return 0;
}
 
/******************************************************************************/
/*                                 S e t u p                                  */
/******************************************************************************/
  
int XrdConfig::Setup(char *dfltp, char *libProt)
{
   XrdConfigProt *cp;
   int xport, protNum = 0;
 
// Establish the FD limit
//
   if (setFDL()) return 1;
 
// Special handling for Linux sendfile()
//
#if ( defined(__linux__) || defined(__GNU__) ) && defined(TCP_CORK)
{  int sokFD, setON = 1;
   if ((sokFD = socket(PF_INET, SOCK_STREAM, 0)) >= 0)
      {setsockopt(sokFD, XrdNetUtils::ProtoID("tcp"), TCP_NODELAY,
                  &setON, sizeof(setON));
       if (setsockopt(sokFD, SOL_TCP, TCP_CORK, &setON, sizeof(setON)) < 0)
          XrdLink::sfOK = 0;
       close(sokFD);
      }
}
#endif
 
// Indicate how sendfile is being handled
//
   TRACE(NET,"sendfile " <<(XrdLink::sfOK ? "enabled." : "disabled!"));
 
// Initialize the buffer manager
//
   BuffPool.Init();
 
// Start the scheduler
//
   Sched.Start();
 
// Setup the link and socket polling infrastructure
//
   if (!XrdLinkCtl::Setup(ProtInfo.ConnMax, ProtInfo.idleWait)
   ||  !XrdPoll::Setup(ProtInfo.ConnMax)) return 1;
 
// Determine the default port number (only for xrootd) if not specified.
//
   if (PortTCP < 0)  
      {if ((PortTCP = XrdNetUtils::ServPort(dfltp))) PortUDP = PortTCP;
          else PortTCP = -1;
      }
 
// We now go through all of the protocols and get each respective port number.
//
   cp = Firstcp;
   while(cp)
        {if (!tlsCtx)
            for (int i = 0; i < cp->numP; i++)
                {if (cp->tlsVec[i])
                    {Log.Emsg("Config", "protocol", cp->proname,
                              "configured with a TLS-only port "
                              "but TLS is not configured!");
                     return 1;
                    }
                }
         xport = (cp->dotls ? PortTLS : PortTCP);
         ProtInfo.Port = (cp->port < 0 ? xport : cp->port);
         XrdOucEnv::Export("XRDPORT", ProtInfo.Port);
         cp->port = XrdProtLoad::Port(cp->libpath,cp->proname,cp->parms,&ProtInfo);
         if (cp->port < 0) return 1;
         for (int i = 1; i < cp->numP; i++)
             if (cp->port == cp->portVec[i]) cp->portVec[i] = -1;
         cp = cp->Next;
        }
 
// Allocate the statistics object. This is akward since we only know part
// of the current configuration. The object will figure this out later.
//
   ProtInfo.Stats = new XrdStats(&Log, &Sched, &BuffPool,
                                 ProtInfo.myName, Firstcp->port,
                                 ProtInfo.myInst, ProtInfo.myProg, mySitName);
   ProtInfo.Stats->Export(theEnv);
 
// If the base protocol is xroot, then save the base port number so we can
// extend the port to the http protocol should it have been loaded. That way
// redirects via xroot will also work for http.
//
   xport = (strcmp("xroot", Firstcp->proname) ? 0 : Firstcp->port);
 
// Load the protocols. For each new protocol port number, create a new
// network object to handle the port dependent communications part. All
// port issues will have been resolved at this point. Note that we need
// to set default network object from the first protocol before loading
// any protocol in case one of them starts using the default network.
//
   XrdInet *arbNet = 0, *theNet;
   while((cp = Firstcp))
         {for (int i = 0; i < cp->numP; i++)
             {if (cp->portVec[i] < 0) continue;
              if (!(cp->portVec[i]) && arbNet) theNet = arbNet;
                 else {theNet = getNet(cp->portVec[i], cp->tlsVec[i]);
                       if (!theNet) return 1;
                       if (!(cp->portVec[i])) arbNet = theNet;
                      }
              if (i == 0) XrdNetTCP = theNet; // Avoid race condition!!!
              ProtInfo.Port   = theNet->Port();
              ProtInfo.NetTCP = theNet;
              ProtInfo.WSize  = theNet->WSize();
              TRACE(NET, cp->proname <<':' <<ProtInfo.Port <<" wsz="
                         <<ProtInfo.WSize);
 
              if (i) XrdProtLoad::Port(protNum, ProtInfo.Port, cp->tlsVec[i]);
                 else {XrdOucEnv::Export("XRDPORT", ProtInfo.Port);
                       protNum = XrdProtLoad::Load(cp->libpath, cp->proname,
                                                   cp->parms, &ProtInfo,
                                                   cp->dotls);
                       if (!protNum) return 1;
                      }
             }
          if (!strcmp("http", cp->proname) && xport)
             {for (int i = 0; i < cp->numP; i++)
                  {if (cp->portVec[i] == xport) {xport = 0; break;}}
              if (xport) XrdProtLoad::Port(protNum, xport, false);
             }
          Firstcp = cp->Next; delete cp;
         }
 
// Leave the env port number to be the first used port number. This may
// or may not be the same as the default port number. This corresponds to
// the default network object.
//
   PortTCP = ProtInfo.Port = XrdNetTCP->Port();
   XrdOucEnv::Export("XRDPORT", PortTCP);
 
// Now check if we have to setup automatic reporting
//
   if (repDest[0] != 0 && (repOpts[0] || repOpts[1])) 
      ProtInfo.Stats->Init(repDest, repInt, repOpts[0], repOpts[1]);
 
// All done
//
   return 0;
}
 
/******************************************************************************/
/*                            S e t u p A P a t h                             */
/******************************************************************************/
 
int XrdConfig::SetupAPath()
{
   int rc;
 
// Modify the AdminPath to account for any instance name. Note that there is
// a negligible memory leak under certain path combinations. Not enough to
// warrant a lot of logic to get around.
//
   if (myInsName) ProtInfo.AdmPath = XrdOucUtils::genPath(AdminPath,myInsName);
      else ProtInfo.AdmPath = AdminPath;
   XrdOucEnv::Export("XRDADMINPATH", ProtInfo.AdmPath);
   AdminPath = XrdOucUtils::genPath(AdminPath, myInsName, ".xrd");
 
// Create the path. Only sockets are group writable but allow read access to
// the path for group members.
//
//
   if ((rc = XrdOucUtils::makePath(AdminPath, AdminMode & ~S_IWGRP)))
       {Log.Emsg("Config", rc, "create admin path", AdminPath);
        return 1;
       }
 
// Make sure the last component has the permission that we want
//
#ifndef WIN32
   if (chmod(AdminPath, AdminMode & ~S_IWGRP))
      {Log.Emsg("Config", errno, "set permission for admin path", AdminPath);
       return 1;
      }
#endif
 
 
// Setup admin connection now
//
   return ASocket(AdminPath, "admin", (mode_t)AdminMode);
}
  
/******************************************************************************/
/*                              S e t u p T L S                               */
/******************************************************************************/
 
bool XrdConfig::SetupTLS()
{
 
// Check if we should issue a verification error
//
   if (!caDir && !caFile && !tlsNoVer)
      {if (tlsNoCAD)
          Log.Say("Config failure: the tlsca directive was not specified!");
          else Log.Say("Config failure: the tlsca directive did not specify "
                       "a certdir or certfile!");
       return false;
      }
 
// Set the message callback before doing anything else
//
   XrdTls::SetMsgCB(TlsError);
 
// Set tracing options as needed
//
   if (TRACING((TRACE_DEBUG|TRACE_TLS)))
      {int tlsdbg = 0;
       if (TRACING(TRACE_DEBUG)) tlsdbg = XrdTls::dbgALL;
          else {if (TRACING(TRACE_TLSCTX)) tlsdbg |= XrdTls::dbgCTX;
                if (TRACING(TRACE_TLSSIO)) tlsdbg |= XrdTls::dbgSIO;
                if (TRACING(TRACE_TLSSOK)) tlsdbg |= XrdTls::dbgSOK;
               }
       XrdTls::SetDebug(tlsdbg, &Logger);
      }
 
// Create a context
//
   static XrdTlsContext xrdTLS(tlsCert, tlsKey, caDir, caFile, tlsOpts);
 
// Check if all went well
//
   if (!xrdTLS.isOK()) return false;
 
// Set address of out TLS object in the global area
//
   XrdGlobal::tlsCtx = &xrdTLS;
   return true;
}
  
/******************************************************************************/
/*                                 U s a g e                                  */
/******************************************************************************/
  
void XrdConfig::Usage(int rc)
{
  extern const char *XrdLicense;
 
  if (rc < 0) std::cerr <<XrdLicense;
     else
     std::cerr <<"\nUsage: " <<myProg <<" [-b] [-c <cfn>] [-d] [-h] [-H] [-I {v4|v6}]\n"
            "[-k {n|sz|sig}] [-l [=]<fn>] [-n <name>] [-N <hname>] [-p <port>]\n"
            "[-P <prot>] [-L <libprot>] [-R] [-s pidfile] [-S site] [-v] [-z]\n"
            "[<protocol_options>]" <<std::endl;
     _exit(rc > 0 ? rc : 0);
}
 
/******************************************************************************/
/*                                x a p a t h                                 */
/******************************************************************************/
 
/* Function: xapath
 
   Purpose:  To parse the directive: adminpath <path> [group]
 
             <path>    the path of the FIFO to use for admin requests.
 
             group     allows group access to the admin path
 
   Note: A named socket is created <path>/<name>/.xrd/admin
 
   Output: 0 upon success or !0 upon failure.
*/
 
int XrdConfig::xapath(XrdSysError *eDest, XrdOucStream &Config)
{
    char *pval, *val;
    mode_t mode = S_IRWXU;
 
// Get the path
//
   pval = Config.GetWord();
   if (!pval || !pval[0])
      {eDest->Emsg("Config", "adminpath not specified"); return 1;}
 
// Make sure it's an absolute path
//
   if (*pval != '/')
      {eDest->Emsg("Config", "adminpath not absolute"); return 1;}
 
// Record the path
//
   if (AdminPath) free(AdminPath);
   AdminPath = strdup(pval);
 
// Get the optional access rights
//
   if ((val = Config.GetWord()) && val[0])
      {if (!strcmp("group", val)) mode |= S_IRWXG;
          else {eDest->Emsg("Config", "invalid admin path modifier -", val);
                return 1;
               }
      }
   AdminMode = ProtInfo.AdmMode = mode;
   return 0;
}
  
/******************************************************************************/
/*                                x a l l o w                                 */
/******************************************************************************/
 
/* Function: xallow
 
   Purpose:  To parse the directive: allow {host | netgroup} <name>
 
             <name> The dns name of the host that is allowed to connect or the
                    netgroup name the host must be a member of. For DNS names,
                    a single asterisk may be specified anywhere in the name.
 
   Output: 0 upon success or !0 upon failure.
*/
 
int XrdConfig::xallow(XrdSysError *eDest, XrdOucStream &Config)
{
    char *val;
    int ishost;
 
    if (!(val = Config.GetWord()))
       {eDest->Emsg("Config", "allow type not specified"); return 1;}
 
    if (!strcmp(val, "host")) ishost = 1;
       else if (!strcmp(val, "netgroup")) ishost = 0;
               else {eDest->Emsg("Config", "invalid allow type -", val);
                     return 1;
                    }
 
    if (!(val = Config.GetWord()))
       {eDest->Emsg("Config", "allow target name not specified"); return 1;}
 
    if (!Police) {Police = new XrdNetSecurity();
                  if (XrdTrace.What == TRACE_ALL) Police->Trace(&XrdTrace);
                 }
    if (ishost)  Police->AddHost(val);
       else      Police->AddNetGroup(val);
 
    return 0;
}
 
/******************************************************************************/
/*                                x h p a t h                                 */
/******************************************************************************/
 
/* Function: xhpath
 
   Purpose:  To parse the directive: homepath <path> [group]
 
             <path>    the path of the home director to be made as the cwd.
 
             group     allows group access to the home path
 
   Output: 0 upon success or !0 upon failure.
*/
 
int XrdConfig::xhpath(XrdSysError *eDest, XrdOucStream &Config)
{
// If the command line specified he home, it cannot be undone
//
   if (Specs & hpSpec)
      {eDest->Say("Config warning: command line homepath cannot be overridden.");
       Config.GetWord();
       return 0;
      }
 
// Free existing home path, if any
//
   if (HomePath) {free(HomePath); HomePath = 0;}
 
// Parse the home path and return success or failure
//
   HomePath = XrdOucUtils::parseHome(*eDest, Config, HomeMode);
   return (HomePath ? 0 : 1);
}
 
/******************************************************************************/
/*                                  x b u f                                   */
/******************************************************************************/
 
/* Function: xbuf
 
   Purpose:  To parse the directive: buffers [maxbsz <bsz>] <memsz> [<rint>]
 
             <bsz>      maximum size of an individualbuffer. The default is 2m.
                        Specify any value 2m < bsz <= 1g; if specified, it must
                        appear before the <memsz> and <memsz> becomes optional.
             <memsz>    maximum amount of memory devoted to buffers
             <rint>     minimum buffer reshape interval in seconds
 
   Output: 0 upon success or !0 upon failure.
*/
int XrdConfig::xbuf(XrdSysError *eDest, XrdOucStream &Config)
{
    static const long long minBSZ = 1024*1024*2+1;  // 2mb
    static const long long maxBSZ = 1024*1024*1024; // 1gb
    int bint = -1;
    long long blim;
    char *val;
 
    if (!(val = Config.GetWord()))
       {eDest->Emsg("Config", "buffer memory limit not specified"); return 1;}
 
    if (!strcmp("maxbsz", val))
       {if (!(val = Config.GetWord()))
           {eDest->Emsg("Config", "max buffer size not specified"); return 1;}
        if (XrdOuca2x::a2sz(*eDest,"maxbz value",val,&blim,minBSZ,maxBSZ))
           return 1;
        XrdGlobal::xlBuff.Init(blim);
        if (!(val = Config.GetWord())) return 0;
       }
 
    if (XrdOuca2x::a2sz(*eDest,"buffer limit value",val,&blim,
                       (long long)1024*1024)) return 1;
 
    if ((val = Config.GetWord()))
       if (XrdOuca2x::a2tm(*eDest,"reshape interval", val, &bint, 300))
          return 1;
 
    BuffPool.Set((int)blim, bint);
    return 0;
}
 
 
/******************************************************************************/
/*                                x m a x f d                                 */
/******************************************************************************/
 
/* Function: xmaxfd
 
   Purpose:  To parse the directive: maxfd [strict] <numfd>
 
             strict     when specified, the limits is always applied. Otherwise,
                        it is only applied when rlimit is infinite.
             <numfd>    maximum number of fs that can be established.
                        Specify a value optionally suffixed with 'k'.
 
   Output: 0 upon success or !0 upon failure.
*/
int XrdConfig::xmaxfd(XrdSysError *eDest, XrdOucStream &Config)
{
    long long minV = 1024, maxV = 1024LL*1024LL; // between 1k and 1m
    long long fdVal;
    char *val;
 
    if ((val = Config.GetWord()))
       {if (!strcmp(val, "strict")) 
           {isStrict = true;
            val = Config.GetWord();
           } else isStrict = false;
       }
 
    if (!val)
       {eDest->Emsg("Config", "file descriptor limit not specified"); return 1;}
 
 
    if (XrdOuca2x::a2sz(*eDest,"maxfd value",val,&fdVal,minV,maxV)) return 1;
 
    maxFD = static_cast<unsigned int>(fdVal);
 
    return 0;
}
 
/******************************************************************************/
/*                                  x n e t                                   */
/******************************************************************************/
 
/* Function: xnet
 
   Purpose:  To parse directive: network [tls] [[no]keepalive] [buffsz <blen>]
                                         [kaparms parms] [cache <ct>] [[no]dnr]
                                         [routes <rtype> [use <ifn1>,<ifn2>]]
                                         [[no]rpipa] [[no]dyndns]
                                         [udprefresh <sec>]
 
             <rtype>: split | common | local
 
             tls       parameters apply only to the tls port
             keepalive do [not] set the socket keepalive option.
             kaparms   keepalive paramters as specified by parms.
             <blen>    is the socket's send/rcv buffer size.
             <ct>      Seconds to cache address to name resolutions.
             [no]dnr   do [not] perform a reverse DNS lookup if not needed.
             routes    specifies the network configuration (see reference)
             [no]rpipa do [not] resolve private IP addresses.
             [no]dyndns This network does [not] use a dynamic DNS.
             udprefresh Refreshes udp sendto addresses should they change
                        This only works for connected udp sockets.
 
   Output: 0 upon success or !0 upon failure.
*/
 
int XrdConfig::xnet(XrdSysError *eDest, XrdOucStream &Config)
{
    char *val;
    int  i, n, V_keep = -1, V_nodnr = 0, V_istls = 0, V_blen = -1, V_ct = -1;
    int   V_assumev4 = -1, v_rpip = -1, V_dyndns = -1, V_udpref = -1;
    long long llp;
    struct netopts {const char *opname; int hasarg; int opval;
                           int *oploc;  const char *etxt;}
           ntopts[] =
       {
        {"assumev4",   0, 1, &V_assumev4, "option"},
        {"keepalive",  0, 1, &V_keep,   "option"},
        {"nokeepalive",0, 0, &V_keep,   "option"},
        {"kaparms",    4, 0, &V_keep,   "option"},
        {"buffsz",     1, 0, &V_blen,   "network buffsz"},
        {"cache",      2, 0, &V_ct,     "cache time"},
        {"dnr",        0, 0, &V_nodnr,  "option"},
        {"nodnr",      0, 1, &V_nodnr,  "option"},
        {"dyndns",     0, 1, &V_dyndns, "option"},
        {"nodyndns",   0, 0, &V_dyndns, "option"},
        {"routes",     3, 1, 0,         "routes"},
        {"rpipa",      0, 1, &v_rpip,   "rpipa"},
        {"norpipa",    0, 0, &v_rpip,   "norpipa"},
        {"tls",        0, 1, &V_istls,  "option"},
        {"udprefresh", 2, 1, &V_udpref, "udprefresh"}
       };
    int numopts = sizeof(ntopts)/sizeof(struct netopts);
 
    if (!(val = Config.GetWord()))
       {eDest->Emsg("Config", "net option not specified"); return 1;}
 
    while (val)
    {for (i = 0; i < numopts; i++)
         if (!strcmp(val, ntopts[i].opname))
            {if (!ntopts[i].hasarg) *ntopts[i].oploc = ntopts[i].opval;
                else {if (!(val = Config.GetWord()))
                         {eDest->Emsg("Config", "network",
                              ntopts[i].opname, "argument missing");
                          return 1;
                         }
                      if (ntopts[i].hasarg == 4)
                         {if (xnkap(eDest, val)) return 1;
                          break;
                         }
                      if (ntopts[i].hasarg == 3)
                         {     if (!strcmp(val, "split"))
                                  XrdNetIF::Routing(XrdNetIF::netSplit);
                          else if (!strcmp(val, "common"))
                                  XrdNetIF::Routing(XrdNetIF::netCommon);
                          else if (!strcmp(val, "local"))
                                  XrdNetIF::Routing(XrdNetIF::netLocal);
                          else {eDest->Emsg("Config","Invalid routes argument -",val);
                                return 1;
                               }
                          if (!(val =  Config.GetWord())|| !(*val)) break;
                          if (strcmp(val, "use")) continue;
                          if (!(val =  Config.GetWord())|| !(*val))
                             {eDest->Emsg("Config", "network routes i/f names "
                                                    "not specified.");
                              return 1;
                             }
                          if (!XrdNetIF::SetIFNames(val)) return 1;
                          ppNet = 1;
                          break;
                         }
                      if (ntopts[i].hasarg == 2)
                         {if (XrdOuca2x::a2tm(*eDest,ntopts[i].etxt,val,&n,0))
                             return 1;
                          *ntopts[i].oploc = n;
                         } else {
                          if (XrdOuca2x::a2sz(*eDest,ntopts[i].etxt,val,&llp,0))
                             return 1;
                          *ntopts[i].oploc = (int)llp;
                         }
                     }
              break;
            }
      if (i >= numopts)
         eDest->Say("Config warning: ignoring invalid net option '",val,"'.");
         else if (!val) break;
      val = Config.GetWord();
     }
 
     if (V_istls)
        {if (V_blen >= 0) TLS_Blen = V_blen;
         if (V_keep >= 0) TLS_Opts = (V_keep  ? XRDNET_KEEPALIVE : 0);
         TLS_Opts |= (V_nodnr ? XRDNET_NORLKUP   : 0) | XRDNET_USETLS;
        } else {
         if (V_blen >= 0) Net_Blen = V_blen;
         if (V_keep >= 0) Net_Opts = (V_keep  ? XRDNET_KEEPALIVE : 0);
         Net_Opts |= (V_nodnr ? XRDNET_NORLKUP   : 0);
        }
 
  // Turn off name chaing if not specified and dynamic dns was specified
  //
     if (V_dyndns >= 0)
        {if (V_dyndns && V_ct < 0) V_ct = 0;
         XrdNetAddr::SetDynDNS(V_dyndns != 0);
        }
     if (V_ct >= 0) XrdNetAddr::SetCache(V_ct);
 
     if (v_rpip >= 0) XrdInet::netIF.SetRPIPA(v_rpip != 0);
     if (V_assumev4 >= 0) XrdInet::SetAssumeV4(true);
 
     if (V_udpref >= 0)
         XrdNetSocketCFG::udpRefr = (V_udpref < 1800 ? 1800 : V_udpref);
     return 0;
}
 
/******************************************************************************/
/*                                 x n k a p                                  */
/******************************************************************************/
 
/* Function: xnkap
 
   Purpose:  To parse the directive: kaparms idle[,itvl[,cnt]]
 
             idle       Seconds the connection needs to remain idle before TCP
                        should start sending keepalive probes.
             itvl       Seconds between individual keepalive probes.
             icnt       Maximum number of keepalive probes TCP should send
                        before dropping the connection,
*/
 
int XrdConfig::xnkap(XrdSysError *eDest, char *val)
{
   char *karg, *comma;
   int knum;
 
// Get the first parameter, idle seconds
//
   karg = val;
   if ((comma = index(val, ','))) {val = comma+1; *comma = 0;}
      else val = 0;
   if (XrdOuca2x::a2tm(*eDest,"kaparms idle", karg, &knum, 0)) return 1;
   XrdNetSocketCFG::ka_Idle = knum;
 
// Get the second parameter, interval seconds
//
   if (!(karg = val)) return 0;
   if ((comma = index(val, ','))) {val = comma+1; *comma = 0;}
      else val = 0;
   if (XrdOuca2x::a2tm(*eDest,"kaparms interval", karg, &knum, 0)) return 1;
   XrdNetSocketCFG::ka_Itvl = knum;
 
// Get the third parameter, count
//
   if (!val) return 0;
   if (XrdOuca2x::a2i(*eDest,"kaparms count", val, &knum, 0)) return 1;
   XrdNetSocketCFG::ka_Icnt = knum;
 
// All done
//
   return 0;
}
  
/******************************************************************************/
/*                                 x p i d f                                  */
/******************************************************************************/
 
/* Function: xpidf
 
   Purpose:  To parse the directive: pidpath <path>
 
             <path>    the path where the pid file is to be created.
 
  Output: 0 upon success or !0 upon failure.
*/
 
int XrdConfig::xpidf(XrdSysError *eDest, XrdOucStream &Config)
{
    char *val;
 
// Get the path
//
   val = Config.GetWord();
   if (!val || !val[0])
      {eDest->Emsg("Config", "pidpath not specified"); return 1;}
 
// Record the path
//
   if (PidPath) free(PidPath);
   PidPath = strdup(val);
   return 0;
}
  
/******************************************************************************/
/*                                 x p o r t                                  */
/******************************************************************************/
 
/* Function: xport
 
   Purpose:  To parse the directive: port [tls] <tcpnum>
                                               [if [<hlst>] [named <nlst>]]
 
             tls        apply this to the tls port
             <tcpnum>   number of the tcp port for incoming requests
             <hlst>     list of applicable host patterns
             <nlst>     list of applicable instance names.
 
   Output: 0 upon success or !0 upon failure.
*/
int XrdConfig::xport(XrdSysError *eDest, XrdOucStream &Config)
{   int rc, istls = 0, pnum = 0;
    char *val, cport[32];
 
    do {if (!(val = Config.GetWord()))
           {eDest->Emsg("Config", "tcp port not specified"); return 1;}
        if (strcmp("tls", val) || istls) break;
        istls = 1;
       } while(1);
 
    strncpy(cport, val, sizeof(cport)-1); cport[sizeof(cport)-1] = '\0';
 
    if ((val = Config.GetWord()) && !strcmp("if", val))
       if ((rc = XrdOucUtils::doIf(eDest,Config, "port directive", myName.c_str(),
                              ProtInfo.myInst, myProg)) <= 0)
          {if (!rc) Config.noEcho(); return (rc < 0);}
 
    if ((pnum = XrdOuca2x::a2p(*eDest, "tcp", cport)) < 0) return 1;
    if (istls) PortTLS = pnum;
       else PortTCP = PortUDP = pnum;
 
    return 0;
}
 
  
/******************************************************************************/
/*                                 x p r o t                                  */
/******************************************************************************/
 
/* Function: xprot
 
   Purpose:  To parse the directive: protocol [tls] <name>[:<port>] <args>
 
             <args> {+port | <loc> [<parm>]}
             tls    The protocol requires tls.
             <name> The name of the protocol (e.g., rootd)
             <port> Port binding for the protocol, if not the default.
             <loc>  The shared library in which it is located.
             <parm> A one line parameter to be passed to the protocol.
 
   Output: 0 upon success or !0 upon failure.
*/
 
int XrdConfig::xprot(XrdSysError *eDest, XrdOucStream &Config)
{
    XrdConfigProt *cpp;
    char *val, *parms, *lib, proname[64], buff[2048];
    int portnum = -1;
    bool dotls = false;
 
    do {if (!(val = Config.GetWord()))
           {eDest->Emsg("Config", "protocol name not specified"); return 1;}
        if (dotls || strcmp("tls", val)) break;
        dotls = true;
       } while(1);
 
    if (strlen(val) > sizeof(proname)-1)
       {eDest->Emsg("Config", "protocol name is too long"); return 1;}
    strcpy(proname, val);
 
    if ((val = index(proname, ':')))
       {if ((portnum = XrdOuca2x::a2p(*eDest, "tcp", val+1)) < 0) return 1;
           else *val = '\0';
       }
 
    if (!(val = Config.GetWord()))
       {eDest->Emsg("Config", "protocol library not specified"); return 1;}
    if (!strcmp("*", val)) lib = 0;
       else if (*val == '+')
               {if (strcmp(val, "+port"))
                   {eDest->Emsg("Config","invalid library specification -",val);
                    return 1;
                   }
                if ((cpp = Firstcp))
                   do {if (!strcmp(proname, cpp->proname))
                          {if (cpp->AddPort(portnum, dotls)) return 0;
                           eDest->Emsg("Config", "port add limit exceeded!");
                           return 1;
                          }
                      } while((cpp = cpp->Next));
                eDest->Emsg("Config","protocol",proname,"not previously defined!");
                return 1;
               }
               else lib = strdup(val);
 
// If no library was specified then this is a default protocol. We must make sure
// sure it is consistent with whatever default we have.
//
   if (!lib && Firstcp && strcmp(proname, Firstcp->proname))
      {char eBuff[512];
       snprintf(eBuff, sizeof(eBuff), "the %s protocol is '%s' not '%s'; "
                "assuming you meant '%s'",
                (Firstcp->libpath ? "assigned" : "builtin"),
                 Firstcp->proname, proname, Firstcp->proname);
       eDest->Say("Config warning: ", eBuff, " but please correct "
                                      "the following directive!");
       snprintf(proname, sizeof(proname), "%s", Firstcp->proname);
      }
 
    *buff = 0;
    if (!Config.GetRest(buff, sizeof(buff)))
       {eDest->Emsg("Config", "Too many parms for protocol", proname);
        return 1;
       }
    parms = (*buff ? strdup(buff) : 0);
 
    if ((cpp = Firstcp))
       do {if (!strcmp(proname, cpp->proname))
              {cpp->Reset(lib, parms, portnum, dotls);
               return 0;
              }
          } while((cpp = cpp->Next));
 
    cpp = new XrdConfigProt(strdup(proname), lib, parms, portnum, dotls);
    if (!lib) {cpp->Next = Firstcp; Firstcp = cpp;
               if (!Lastcp) Lastcp = cpp;
              }
       else   {if (Lastcp) Lastcp->Next = cpp;
                  else     Firstcp = cpp;
               Lastcp = cpp;
              }
    return 0;
}
 
/******************************************************************************/
/*                                  x r e p                                   */
/******************************************************************************/
  
/* Function: xrep
 
   Purpose:  To parse the directive: report <dest1>[,<dest2>]
                                            [every <sec>] <opts>
 
             <dest1>   where a UDP based report is to be sent. It may be a
                       <host:port> or a local named UDP pipe (i.e., "/...").
 
             <dest2>   A secondary destination.
 
             <sec>     the reporting interval. The default is 10 minutes.
 
             <opts>    What to report. "all" is the default.
 
  Output: 0 upon success or !0 upon failure.
*/
 
int XrdConfig::xrep(XrdSysError *eDest, XrdOucStream &Config)
{
   static struct repopts {const char *opname; int opval; bool jOK;} rpopts[] =
       {
        {"addons",   XRD_STATS_ADON, true},
        {"all",      XRD_STATS_ALLX, true},
        {"buff",     XRD_STATS_BUFF, false},
        {"info",     XRD_STATS_INFO, false},
        {"link",     XRD_STATS_LINK, false},
        {"plugins",  XRD_STATS_PLUG, true},
        {"poll",     XRD_STATS_POLL, false},
        {"process",  XRD_STATS_PROC, false},
        {"protocols",XRD_STATS_PROT, false},
        {"prot",     XRD_STATS_PROT, false},
        {"sched",    XRD_STATS_SCHD, false},
        {"sgen",     XRD_STATS_SGEN, false},
        {"sync",     XRD_STATS_SYNC, true},
        {"syncwp",   XRD_STATS_SYNCA,true}
       };
   int i, neg, numopts = sizeof(rpopts)/sizeof(struct repopts);
   char  *val, *cp;
   int  isJSON = 0;
  
   if (!(val = Config.GetWord()))
      {eDest->Emsg("Config", "report parameters not specified"); return 1;}
 
// Cleanup to start anew
//
   if (repDest[0]) {free(repDest[0]); repDest[0] = 0;}
   if (repDest[1]) {free(repDest[1]); repDest[1] = 0;}
   repOpts[0] = 0; repOpts[1] = 0;
   repInt  = 600;
 
// Decode the destination
//
   if ((cp = (char *)index(val, ',')))
      {if (!*(cp+1))
          {eDest->Emsg("Config","malformed report destination -",val); return 1;}
          else { repDest[1] = cp+1; *cp = '\0';}
      }
   repDest[0] = val;
   for (i = 0; i < 2; i++)
       {if (!(val = repDest[i])) break;
        if (*val != '/' && (!(cp = index(val, (int)':')) || !atoi(cp+1)))
           {eDest->Emsg("Config","report dest port missing or invalid in",val);
            return 1;
           }
        repDest[i] = strdup(val);
       }
 
// Make sure dests differ
//
   if (repDest[0] && repDest[1] && !strcmp(repDest[0], repDest[1]))
      {eDest->Emsg("Config", "Warning, report dests are identical.");
       free(repDest[1]); repDest[1] = 0;
      }
 
// Get optional "every"
//
   if (!(val = Config.GetWord()))
      {repOpts[0] = XRD_STATS_ALLX; // Default is XML
       return 0;
      }
 
   if (!strcmp("every", val))
      {if (!(val = Config.GetWord()))
          {eDest->Emsg("Config", "report every value not specified"); return 1;}
       if (XrdOuca2x::a2tm(*eDest,"report every",val,&repInt,1)) return 1;
       val = Config.GetWord();
      }
 
// Get reporting options
//
   while(val)
        {if (!strcmp(val, "json"))
            {isJSON = 1;
             val = Config.GetWord(); continue;
            }
         if (!strcmp(val, "off"))
            {repOpts[isJSON] = 0;
             val = Config.GetWord(); continue;
            }
         if ((neg = (val[0] == '-' && val[1]))) val++;
         for (i = 0; i < numopts; i++)
             {if (!strcmp(val, rpopts[i].opname))
                 {if (neg) repOpts[isJSON] &= ~rpopts[i].opval;
                     else {if (isJSON && !rpopts[i].jOK)
                              {eDest->Emsg("Config",val,"does not support JSON");
                               return 1;
                              }
                           repOpts[isJSON] |=  rpopts[i].opval;
                          }
                   break;
                  }
             }
         if (i >= numopts)
            eDest->Say("Config warning: ignoring invalid report option '",val,"'.");
         val = Config.GetWord();
        }
 
// Apply the sync option to all formats
//
   if ((repOpts[0] | repOpts[1]) & XRD_STATS_SYNC)
      {repOpts[0] |= XRD_STATS_SYNC; repOpts[0] &= ~XRD_STATS_SYNCA;
       repOpts[1] |= XRD_STATS_SYNC; repOpts[1] &= ~XRD_STATS_SYNCA;
      } else {
       if ((repOpts[0] | repOpts[1]) & XRD_STATS_SYNCA)
          {repOpts[0] |= XRD_STATS_SYNCA;
           repOpts[1] |= XRD_STATS_SYNCA;
          }
      }
 
// If at the end nothing was selected, then provide the default
//
   if (!((repOpts[0] | repOpts[1])  & XRD_STATS_ALLX))
      repOpts[0] |= (XRD_STATS_ALLX & ~XRD_STATS_INFO);
   repOpts[1] &= XRD_STATS_ALLJ | XRD_STATS_SYNC | XRD_STATS_SYNCA;
 
// All done
//
   return 0;
}
 
/******************************************************************************/
/*                                x s c h e d                                 */
/******************************************************************************/
 
/* Function: xsched
 
   Purpose:  To parse directive: sched [mint <mint>] [maxt <maxt>] [avlt <at>]
                                       [idle <idle>] [stksz <qnt>] [core <cv>]
 
             <mint>   is the minimum number of threads that we need. Once
                      this number of threads is created, it does not decrease.
             <maxt>   maximum number of threads that may be created. The
                      actual number of threads will vary between <mint> and
                      <maxt>.
             <avlt>   Are the number of threads that must be available for
                      immediate dispatch. These threads are never bound to a
                      connection (i.e., made stickied). Any available threads
                      above <ft> will be allowed to stick to a connection.
             <cv>     asis - leave current value alone.
                      max  - set value to maximum allowed (hard limit).
                      off  - turn off core files.
             <idle>   The time (in time spec) between checks for underused
                      threads. Those found will be terminated. Default is 780.
             <qnt>    The thread stack size in bytes or K, M, or G.
 
   Output: 0 upon success or 1 upon failure.
*/
 
int XrdConfig::xsched(XrdSysError *eDest, XrdOucStream &Config)
{
    char *val;
    long long lpp;
    int  i, ppp = 0;
    int  V_mint = -1, V_maxt = -1, V_idle = -1, V_avlt = -1;
    struct schedopts {const char *opname; int minv; int *oploc;
                      const char *opmsg;} scopts[] =
       {
        {"stksz",      0,       0, "sched stksz"},
        {"mint",       1, &V_mint, "sched mint"},
        {"maxt",       1, &V_maxt, "sched maxt"},
        {"avlt",       1, &V_avlt, "sched avlt"},
        {"core",       1,       0, "sched core"},
        {"idle",       0, &V_idle, "sched idle"}
       };
    int numopts = sizeof(scopts)/sizeof(struct schedopts);
 
    if (!(val = Config.GetWord()))
       {eDest->Emsg("Config", "sched option not specified"); return 1;}
 
    while (val)
          {for (i = 0; i < numopts; i++)
               if (!strcmp(val, scopts[i].opname))
                  {if (!(val = Config.GetWord()))
                      {eDest->Emsg("Config", "sched", scopts[i].opname,
                                  "value not specified");
                       return 1;
                      }
                        if (*scopts[i].opname == 'i')
                           {if (XrdOuca2x::a2tm(*eDest, scopts[i].opmsg, val,
                                                &ppp, scopts[i].minv)) return 1;
                           }
                   else if (*scopts[i].opname == 'c')
                           {     if (!strcmp("asis", val)) coreV = -1;
                            else if (!strcmp("max",  val)) coreV =  1;
                            else if (!strcmp("off",  val)) coreV =  0;
                            else {eDest->Emsg("Config","invalid sched core value -",val);
                                  return 1;
                                 }
                           }
                   else if (*scopts[i].opname == 's')
                           {if (XrdOuca2x::a2sz(*eDest, scopts[i].opmsg, val,
                                                &lpp, scopts[i].minv)) return 1;
                            XrdSysThread::setStackSize((size_t)lpp);
                            break;
                           }
                   else if (XrdOuca2x::a2i(*eDest, scopts[i].opmsg, val,
                                     &ppp,scopts[i].minv)) return 1;
                   *scopts[i].oploc = ppp;
                   break;
                  }
           if (i >= numopts)
              eDest->Say("Config warning: ignoring invalid sched option '",val,"'.");
           val = Config.GetWord();
          }
 
// Make sure specified quantities are consistent
//
  if (V_maxt > 0)
     {if (V_mint > 0 && V_mint > V_maxt)
         {eDest->Emsg("Config", "sched mint must be less than maxt");
          return 1;
         }
      if (V_avlt > 0 && V_avlt > V_maxt)
         {eDest->Emsg("Config", "sched avlt must be less than maxt");
          return 1;
         }
     }
 
// Establish scheduler options
//
   Sched.setParms(V_mint, V_maxt, V_avlt, V_idle);
   return 0;
}
 
/******************************************************************************/
/*                                  x s i t                                   */
/******************************************************************************/
 
/* Function: xsit
 
   Purpose:  To parse directive: sitename <name>
 
             <name>   is the 1- to 15-character site name to be included in
                      monitoring information. This can also come from the
                      command line -N option. The first such name is used.
 
   Output: 0 upon success or 1 upon failure.
*/
 
int XrdConfig::xsit(XrdSysError *eDest, XrdOucStream &Config)
{
    char *val;
 
    if (!(val = Config.GetWord()))
       {eDest->Emsg("Config", "sitename value not specified"); return 1;}
 
    if (mySitName) eDest->Emsg("Config", "sitename already specified, using '",
                               mySitName, "'.");
       else mySitName = XrdOucSiteName::Set(val, 63);
    return 0;
}
 
/******************************************************************************/
/*                               x t c p m o n                                */
/******************************************************************************/
 
/* Function: xtcpmon
 
   Purpose:  To parse the directive: tcpmonlib [++] <path> [<parms>]
 
             <path>  absolute path to the tcp monitor plugin.
             <parms> optional parameters passed to the plugin.
 
   Output: 0 upon success or !0 upon failure.
*/
 
int XrdConfig::xtcpmon(XrdSysError *eDest, XrdOucStream &Config)
{
   std::string path;
   char *val, parms[2048];
   bool push = false;
 
// Get the path or the push token
//
   if ((val = Config.GetWord()))
      {if (!strcmp(val, "++"))
          {push = true;
           val =  Config.GetWord();
          }
      }
 
// Make sure a path was specified
//
   if (!val || !*val)
      {eDest->Emsg("Config", "tcpmonlib not specified"); return 1;}
 
// Make sure the path is absolute
//
   if (*val != '/')
      {eDest->Emsg("Config", "tcpmonlib path is not absolute"); return 1;}
 
// Sequester the path as we will get additional tokens
//
   path = val;
 
// Record any parms
//
   if (!Config.GetRest(parms, sizeof(parms)))
      {eDest->Emsg("Config", "tcpmonlib parameters too long"); return 1;}
 
// Check if we have a plugin info object (we will need one for this)
//
   if (!tmoInfo) tmoInfo = new XrdTcpMonInfo("xrd.tcpmonlib",ConfigFN,*eDest);
 
// Add the plugin
//
   tmoInfo->KingPin.Add(path.c_str(), (*parms ? parms : 0), push);
 
// All done
//
   return 0;
}
  
/******************************************************************************/
/*                                  x t l s                                   */
/******************************************************************************/
 
/* Function: xtls
 
   Purpose:  To parse directive: tls <cpath> [<kpath>] [<opts>]
 
             <cpath>  is the the certificate file to be used.
             <kpath>  is the the private key file to be used.
             <opts>   options:
                      [no]detail       do [not] print TLS library msgs
                      hsto <sec>       handshake timeout (default 10).
 
   Output: 0 upon success or 1 upon failure.
*/
 
int XrdConfig::xtls(XrdSysError *eDest, XrdOucStream &Config)
{
    char *val;
    int num;
 
    if (!(val = Config.GetWord()))
       {eDest->Emsg("Config", "tls cert path not specified"); return 1;}
 
    if (*val != '/')
       {eDest->Emsg("Config", "tls cert path not absolute"); return 1;}
 
    if (tlsCert) free(tlsCert);
    tlsCert = strdup(val);
    if (tlsKey)  free(tlsKey);
    tlsKey  = 0;
 
    if (!(val = Config.GetWord())) return 0;
 
    if (*val == '/' || !strncmp(val, "pkcs11:", 7))
       {tlsKey = strdup(val);
        if (!(val = Config.GetWord())) return 0;
       }
 
do {     if (!strcmp(val,   "detail")) SSLmsgs = true;
    else if (!strcmp(val, "nodetail")) SSLmsgs = false;
    else if (!strcmp(val, "hsto" ))
            {if (!(val = Config.GetWord()))
                {eDest->Emsg("Config", "tls hsto value not specified");
                 return 1;
                }
             if (XrdOuca2x::a2tm(*eDest,"tls hsto",val,&num,1,255))
                return 1;
             tlsOpts = TLS_SET_HSTO(tlsOpts,num);
            }
    else {eDest->Emsg("Config", "invalid tls option -",val); return 1;}
   } while ((val = Config.GetWord()));
 
    return 0;
}
  
/******************************************************************************/
/*                                x t l s c a                                 */
/******************************************************************************/
 
/* Function: xtlsca
 
   Purpose:  To parse directive: tlsca noverify | <parms> [<opts>]
 
             parms: {certdir | certfile} <path>
 
             opts:  [crlcheck {all | external | last}] [log {failure | off}]
 
                    [[no]proxies] [refresh t[m|h|s]] [verdepth <n>]
 
             noverify client's cert need not be verified.
             <path>   is the the certificate path or file to be used.
                      Both a file and a directory path can be specified.
             crlcheck Controls internal crl checks:
                      all       applies crls to the full chain
                      external leaves crl checking to an external plug-in
                      last     applies crl check to the last cert only
             log      logs verification attempts: "failure" (the default) logs
                      verification failures, while "off" logs nothing.
             proxies  allows proxy certs while noproxies does not.
             <t>      the crl/ca refresh interval.
             <n>      the maximum certificate depth to be check.
 
   Output: 0 upon success or 1 upon failure.
*/
 
int XrdConfig::xtlsca(XrdSysError *eDest, XrdOucStream &Config)
{
   char *val, **cadest, kword[16];
   int  vd, rt;
   bool isdir;
 
   if (!(val = Config.GetWord()))
      {eDest->Emsg("Config", "tlsca parameter not specified"); return 1;}
   tlsNoCAD = false;
 
   if (!strcmp(val, "noverify"))
      {tlsNoVer = true;
       if (caDir)  {free(caDir);  caDir  = 0;}
       if (caFile) {free(caFile); caFile = 0;}
       return 0;
      }
   tlsNoVer = false;
 
 
   do {if (!strcmp(val, "proxies") || !strcmp("noproxies", val))
          {if (*val == 'n') tlsOpts |=  XrdTlsContext::nopxy;
              else          tlsOpts &= ~XrdTlsContext::nopxy;
           continue;
          }
 
       if (strlen(val) >= (int)sizeof(kword))
          {eDest->Emsg("Config", "Invalid tlsca parameter -", val);
           return 1;
          }
       strcpy(kword, val);
 
       if (!(val = Config.GetWord()))
          {eDest->Emsg("Config", "tlsca", kword, "value not specified");
           return 1;
          }
            if ((isdir = !strcmp(kword, "certdir"))
            ||  !strcmp(kword, "certfile"))
               {if (*val != '/')
                   {eDest->Emsg("Config","tlsca",kword,"path is not absolute.");
                    return 1;
                   }
                cadest = (isdir ? &caDir : &caFile);
               if (*cadest) free(*cadest);
               *cadest = strdup(val);
              }
       else if (!strcmp(kword, "crlcheck"))
               {tlsOpts &= ~(XrdTlsContext::crlON | XrdTlsContext::crlFC);
                     if (!strcmp(val, "all"))  tlsOpts |= XrdTlsContext::crlFC;
                else if (!strcmp(val, "last")) tlsOpts |= XrdTlsContext::crlON;
                else if ( strcmp(val, "external"))
                        {eDest->Emsg("Config","Invalid tlsca crlcheck "
                                     " argument -",val);
                         return 1;
                        }
               }
       else if (!strcmp(kword, "log"))
               {     if (!strcmp(val, "off"))
                        tlsOpts &= ~XrdTlsContext::logVF;
                else if (!strcmp(val, "failure"))
                        tlsOpts |=  XrdTlsContext::logVF;
                else {eDest->Emsg("Config","Invalid tlsca log argument -",val);
                      return 1;
                     }
               }
       else if (!strcmp(kword, "refresh"))
               {if (XrdOuca2x::a2tm(*eDest, "tlsca refresh interval",
                                    val, &rt,1,std::min(int((XrdTlsContext::crlRF >> XrdTlsContext::crlRS) * 60),std::numeric_limits<int>::max()))) return 1;
                if (rt < 60) rt = 60;
                   else if (rt % 60) rt += 60;
                rt = rt/60;
                tlsOpts = TLS_SET_REFINT(tlsOpts,rt);
               }
       else if (!strcmp(kword, "verdepth"))
               {if (XrdOuca2x::a2i(*eDest,"tlsca verdepth",val,&vd,1,255))
                   return 1;
                tlsOpts = TLS_SET_VDEPTH(tlsOpts,vd);
               }
       else {eDest->Emsg("Config", "invalid tlsca option -",kword); return 1;}
 
       } while((val = Config.GetWord()));
 
   return 0;
}
  
/******************************************************************************/
/*                                x t l s c i                                 */
/******************************************************************************/
 
/* Function: xtlsci
 
   Purpose:  To parse directive: tlsciphers <ciphers>
 
             <ciphers> list of colon sperated ciphers to use.
 
   Output: 0 upon success or 1 upon failure.
*/
 
int XrdConfig::xtlsci(XrdSysError *eDest, XrdOucStream &Config)
{
   char *val, *ciphers;
 
   if (!(val = Config.GetWord()))
      {eDest->Emsg("Config", "tlsciphers parameter not specified"); return 1;}
 
   ciphers = strdup(val);
 
   if ((val = Config.GetWord()))
      {eDest->Emsg("Config","Invalid tlsciphers argument -",val);
       return 1;
      }
 
   XrdTlsContext::SetDefaultCiphers(ciphers);
   return 0;
}
  
/******************************************************************************/
/*                                  x t m o                                   */
/******************************************************************************/
 
/* Function: xtmo
 
   Purpose:  To parse directive: timeout [read <msd>] [hail <msh>]
                                         [idle <msi>] [kill <msk>]
 
             <msd>    is the maximum number of seconds to wait for pending
                      data to arrive before we reschedule the link
                      (default is 5 seconds).
             <msh>    is the maximum number of seconds to wait for the initial
                      data after a connection  (default is 30 seconds)
             <msi>    is the minimum number of seconds a connection may remain
                      idle before it is closed (default is 5400 = 90 minutes)
             <msk>    is the minimum number of seconds to wait after killing a
                      connection for it to end (default is 3 seconds)
 
   Output: 0 upon success or 1 upon failure.
*/
 
int XrdConfig::xtmo(XrdSysError *eDest, XrdOucStream &Config)
{
    char *val;
    int  i, ppp, rc;
    int  V_read = -1, V_idle = -1, V_hail = -1, V_kill = -1;
    struct tmoopts { const char *opname; int istime; int minv;
                            int *oploc;  const char *etxt;}
           tmopts[] =
       {
        {"read",       1, 1, &V_read, "timeout read"},
        {"hail",       1, 1, &V_hail, "timeout hail"},
        {"idle",       1, 0, &V_idle, "timeout idle"},
        {"kill",       1, 0, &V_kill, "timeout kill"}
       };
    int numopts = sizeof(tmopts)/sizeof(struct tmoopts);
 
    if (!(val = Config.GetWord()))
       {eDest->Emsg("Config", "timeout option not specified"); return 1;}
 
    while (val)
          {for (i = 0; i < numopts; i++)
               if (!strcmp(val, tmopts[i].opname))
                   {if (!(val = Config.GetWord()))
                       {eDest->Emsg("Config","timeout", tmopts[i].opname,
                                   "value not specified");
                        return 1;
                       }
                    rc = (tmopts[i].istime ?
                          XrdOuca2x::a2tm(*eDest,tmopts[i].etxt,val,&ppp,
                                                 tmopts[i].minv) :
                          XrdOuca2x::a2i (*eDest,tmopts[i].etxt,val,&ppp,
                                                 tmopts[i].minv));
                    if (rc) return 1;
                    *tmopts[i].oploc = ppp;
                    break;
                   }
           if (i >= numopts)
              eDest->Say("Config warning: ignoring invalid timeout option '",val,"'.");
           val = Config.GetWord();
          }
 
// Set values and return
//
   if (V_read >  0) ProtInfo.readWait = V_read*1000;
   if (V_hail >= 0) ProtInfo.hailWait = V_hail*1000;
   if (V_idle >= 0) ProtInfo.idleWait = V_idle;
   XrdLinkCtl::setKWT(V_read, V_kill);
   return 0;
}
  
/******************************************************************************/
/*                                x t r a c e                                 */
/******************************************************************************/
 
/* Function: xtrace
 
   Purpose:  To parse the directive: trace <events>
 
             <events> the blank separated list of events to trace. Trace
                      directives are cummalative.
 
   Output: 0 upon success or 1 upon failure.
*/
 
int XrdConfig::xtrace(XrdSysError *eDest, XrdOucStream &Config)
{
    char *val;
    static struct traceopts {const char *opname; int opval;} tropts[] =
       {
        {"all",      TRACE_ALL},
        {"off",      TRACE_NONE},
        {"none",     TRACE_NONE},
        {"conn",     TRACE_CONN},
        {"debug",    TRACE_DEBUG},
        {"mem",      TRACE_MEM},
        {"net",      TRACE_NET},
        {"poll",     TRACE_POLL},
        {"protocol", TRACE_PROT},
        {"sched",    TRACE_SCHED},
        {"tls",      TRACE_TLS},
        {"tlsctx",   TRACE_TLSCTX},
        {"tlssio",   TRACE_TLSSIO},
        {"tlssok",   TRACE_TLSSOK}
       };
    int i, neg, trval = 0, numopts = sizeof(tropts)/sizeof(struct traceopts);
 
    if (!(val = Config.GetWord()))
       {eDest->Emsg("Config", "trace option not specified"); return 1;}
    while (val)
         {if (!strcmp(val, "off")) trval = 0;
             else {if ((neg = (val[0] == '-' && val[1]))) val++;
                   for (i = 0; i < numopts; i++)
                       {if (!strcmp(val, tropts[i].opname))
                           {if (neg)
                               if (tropts[i].opval) trval &= ~tropts[i].opval;
                                  else trval = TRACE_ALL;
                               else if (tropts[i].opval) trval |= tropts[i].opval;
                                       else trval = TRACE_NONE;
                            break;
                           }
                       }
                   if (i >= numopts)
                      eDest->Say("Config warning: ignoring invalid trace option '",val,"'.");
                  }
          val = Config.GetWord();
         }
    XrdTrace.What = trval;
    return 0;
}