#								30-JUN-1994
# Configuration file for default server installation.  See bottom of
# file for description of configuration (rules) file format.
#
include http_suffixes.conf	# suffixes definitions.
#
# Comment out the following line to disable searches.
search  dummy
#
# Comment out the following line to disable the authenticator sub-process.
# The authenticator must be running in order for any 'protect' rules to
# function properly.
#
authenticator www_root:[000000]sample_authenticator
#
# Protect certain urls in order to demonstrate the protection mechaing.
hostprot /www/hostprot.html www_root:[000000]level1.prot
protect /www/userprot.html www_root:[000000]level2.prot
#
# Sample exec definition.  It assumes the following directory structure:
#
#	www_root:[000000]		Server account login directory.
#	www_root:[bin]			Contains scripts.
#	www_root:[documents]		Contains HTML files (home page, etc).
#
map /help /htbin/helpgate/help
exec /htbin/* www_root:[bin]
#
# Configure access to home files directory (www_root:[documents]).  Set alias 
# /www to translate to /www_root/documents.
#
map / /www/index.html
pass /www/* /www_root/documents/*
pass /www_root/documents/*
#
# Only allow certain of the login director (www_root:[000000]) files to be
# accessible, then prohibit www_root/000000/* in order to prevent users from
# circumventing the protected files by putting adding a series of root dirs.
#
pass /www_root/000000/wwwexec.com
pass /www_root/000000/sample_authenticator.c
fail /www_root/000000/*
#
# Comment out the follow line to disable user directory access.  The server will
# allow access to the web subdirectory of a user's account if set by the user.
#
userdir www
#
# Fail everything else (this is the default, but include for completeness).
#
fail 	*
##################################################################################
#
# Format of rules file:
#    Comments are delimited by  #.
#
#    map template result
#       If address matches template, use result string for future rulse.
#	Template and result must be in unix file specification format
#       (/device/dir/dir/...).
#
#    pass template [result]
#       if address matches the template, use it as is.  If result argument
#	is present, perform map operation and use translation.
#
#    userdir sub-dir
#	if address matches template /~username/xxx, replace with
#	/device/directory/sub-dir/xxx where device and directory are specified
#	username's default device and directory.  Note that sub-dir string
#	must not have a leading slash. (e.g. userdir web).
#
#    fail template
#       Prohibit access to this address.
#
#     redirect template url
#	If address matches template, a redirect will be sent to the client
#	redirecting it to the specified URL.  The URL must be in absolute
#	format (include scheme and host).  Local redirects are redundant
#	since they can be handled by map directives.
#
#     htbin directory		* obsolete *
#	Superceded by exec directory, for compatibility this directive is
#	mapped internally to "exec /htbin/* directory".
#
#    exec dir-template [node::]script-directory
#	If address matches dir-template, invoke corresponding script
#       in corresponding script directory.  Note that dir-template must be
#       in unix fomrmat (/dir/dir...) and script-directory must	be in VMS 
#	format (disk:[dir]).  The the script directory is prefixed with a
#	DECnet node, the script task will be started on that node instead
#	of the default.
#
#    accesslog logfile
#	Name of access log file.  The file specified by logfile is opened 
#	for append or created if it does not exist.
#
#    dnslookup [on|off]
#	Enable/disable translation of remote host address to Domain Name
#	Server host name.  If enabled, the translated name will appear
#	in the log files.
#
#    tracelevel level [tracefile]
#	Set trace level and trace file for debugging.  You may specify level
#       as either a numeric constant or a environment variable (DCL symbol)
#	name.  The trace level has the same meaning as the environment
#	variable http_log_level and will override it.  The optional tracefile
#	parameter specifies a separate file to record the trace, if missing
#	trace entries will go to the standard error log file.
#
#    include config-file
#	Read specified file and process records as if they were being read 
#	from original file at the point of the include statement.  Includes
#	may be nested to 20 levels (who would do that?).
#
#    defprot dir-template protection-setup-file
#	Set default protection setup file for protect and hostprot directives.
#
#    protect dir-template [protection-setup-file]
#	If address matches dir-template, validate access against that
#	granted by protection-setup-file.  The protection-setup-file argument
#	may be in either unix or VMS format.
#
#    hostprot dir-template [protection-setup-file]
#	Same as protect command above except that simpler (level 1)
#	protection checks take place.  Only groupmask directives in setup
#	file are processed and only items without usernames (i.e. 
#	@xxx.xxx.xxx.xxx) are checked.
#
#    search <name>
#	Search script to use to search documents.  If search rule not
#	present, searches will be disabled.
#
#    suffix [.sfx|*|*.*] representation encoding [quality]
#       bind data-type to file suffix.  Special values for suffix fields are
#       * (match any file that hasn't matched another suffix) and *.* (
#	(match file with suffix that hasn't matched another suffix).
#	The represention field is the MIME content-type.
#       Data encodings: BASE64 QUOTED_PRINTABLE 8BIT 7BIT BINARY x-token.
#
#    presentation representation command-string
#	Used by clients to map respresentations to a command to execute to
#       render that representation (e.g. mpeg).  %s in the command string
#       is substituted with the file name.
#
# Operation:
#    At server startup, rules file is read sequentially.  The presence and/or
#    values of any 'search', 'authenticator', 'suffix', and 'presentation'
#    commands is noted/saved.  All other rules are tokenized and saved
#    in a table for processing in the same order that they occur in the rules
#    file when a URL is to be translated.  Comments are discarded.
#
#    The ident portion of a URL is translated by making a copy of it in a work
#    area and testing the work area copy against each entry in the tokenized
#    rule list.  A rule that matches against the translation in the work area
#    may rewrite the translation (see map rule), subsequent tests for
#    triggering rules will be made against the new translation.
#
#    The data from suffix rules is kept in a different data structure optimized
#    for finding highest quality representation supported by a client request.
##################################################################################