NAME
        bjorb.conf - bjorb $B@_Dj%U%!%$%k(B

SYNOPSIS
        bjorb.conf

DESCRIPTION

        $B0J2<$N%*%W%7%g%s$r;XDj$G$-$^$9!#(B

        log_level <num>      (default is 0)
                $B%m%0=PNO%l%Y%k$r;XDj$7$^$9!#(B
                    0 - $B%(%i!<%a%C%;!<%8$N$_=PNO(B
                    1 - $B%o!<%K%s%0$b=PNO(B
                    2 - $B%W%m%0%i%`%G%P%C%0>pJs$r=PNO(B
                    3 - $BDL?.%G%P%C%0>pJs$r=PNO(B

                $B$?$@$7!"(Bbjorb $B$,(B NO_DEBUG $B%*%W%7%g%sIU$-$G%3%s%Q%$%k$5(B
                $B$l$F$$$k>l9g$O!"(B2, 3 $B$O%G%P%C%0>pJs$r=PNO$7$^$;$s!#(B

        read_timeout <nsec>  (default is 0)
                $BDL?.$,(B nsec $BIC4VES@d$($?;~!"%3%M%/%7%g%s$r@ZCG$7$^$9!#(B
                0 $B$r;XDj$9$k$H!"%?%$%`%"%&%H$OH/@8$7$^$;$s!#(B

        access_log   <filename> | syslog[:<facility>] (default is none)
                $B%"%/%;%9>pJs$r=PNO$9$k%U%!%$%k$r;XDj$7$^$9!#(B
                access_log $B$r;XDj$7$J$$$H!"%"%/%;%9>pJs$O=PNO$5$l$^$;(B
                $B$s!#(B

                 $B%U%!%$%kL>$G$J$/!"(B "syslog" $B$r;XDj$9$k$H(Bsyslog$B=PNO$r9T(B
                $B$J$$$^$9!#%G%U%)%k%H$G$O(B LOG_LOCAL0 $B$X=PNO$r9T$J$$$^$9(B
                $B$,!"(Bsyslog:LOG_LOCAL1 $B$N$h$&$KB>$N(B facility $B$XJQ99$G$-(B
                $B$^$9!#(B $B=PNO%l%Y%k$O(B LOG_INFO $B$G$9!#(B
                
                $BNc(B)
                     access_log /var/log/bjorb.log
                     access_log syslog
                     access_log syslog:LOG_LOCAL1

                     $B$5$i$K!"(B/etc/syslog.conf $B$K2<5-$N$h$&$J%(%s%H%j$r(B
                     $BDI2C$7$F$/$@$5$$!#(B

                     local0.info /var/log/bjorb.log

        error_log    <filename> | syslog[:<facility>] (deafult is stdout)
                $B%(%i!<!"7Y9p!"%G%P%C%0>pJs$J$I$r=PNO$9$k%U%!%$%k$r;XDj(B
                $B$7$^$9!#>JN,$9$k$H!"I8=`%(%i!<=PNO$K$3$l$i$N>pJs$,=PNO(B
                $B$5$l$^$9!#(B

                $B%U%!%$%kL>$G$J$/!"(B "syslog" $B$r;XDj$9$k$H(Bsyslog$B=PNO$r9T(B
                $B$J$$$^$9!#%G%U%)%k%H$G$O(B LOG_LOCAL0 $B$X=PNO$r9T$J$$$^$9(B
                $B$,!"(Bsyslog:LOG_LOCAL1 $B$N$h$&$KB>$N(B facility $B$XJQ99$G$-(B
                $B$^$9!#(B
                log_level 0 $B$GI=<($5$l$k>c32%a%C%;!<%8$O(B LOG_ERR $B$G!"(B
                log_level 1 $B$GI=<($5$l$k(Bwarning $B%a%C%;!<%8$O(B LOG_WORN$B!"(B
                log_level 2 $B0J>e$GI=<($5$l$k%G%P%C%0%a%C%;!<%8$O(B 
                LOG_DEBUG $B%l%Y%k$G=PNO$5$l$^$9!#(B

                $BNc(B)
                     error_log /var/log/bjorb-err.log
                     error_log syslog
                     error_log syslog:LOG_LOCAL1

                     $B$5$i$K!"(B/etc/syslog.conf $B$K2<5-$N$h$&$J%(%s%H%j$r(B
                     $BDI2C$7$F$/$@$5$$!#(B

                     local0.warn   /var/log/bjorb.error
                     local0.debug /var/log/bjorb.debug

        accept  [<interface>:]<port> [with <options>]
                options := SSL, VERIFY

                $B%/%i%$%"%s%H$+$i$N@\B3MW5a$r<u$1$k%$%s%?%U%'!<%9$H%]!<(B
                $B%HL>$r;XDj$7$^$9!#(B
                interface $B$K$O(B $B%[%9%HL>$d(B IP $B%"%I%l%9$,;XDj$G$-$^$9!#(B
                interfece $B$r>JN,$9$k$H!"$=$N%^%7%s$N$9$Y$F$N%$%s%?%U%'!<(B
                $B%9$G@\B3MW5a$r<u$1IU$1$^$9!#(B
                $B0J2<$N%*%W%7%g%s$r;XDj$G$-$^$9!#(B
                SSL    - $B%/%i%$%"%s%H$+$i(B SSL $B$G@\B3MW5a$r<u$1$k!#(B
                         CA_cert_file $B$rJ;$;$F;XDj$7$J$1$l$P$J$i$J$$!#(B
                VERIFY - $BG'>Z$5$l$?>ZL@=q$r;}$D%/%i%$%"%s%H$+$i$N$_@\(B
                         $BB3MW5a$r<u$1IU$1$k!#(B
                         CA_cert_path $B$rJ;$;$F;XDj$9$kI,MW$,$"$k!#(B

        connect <interface>:<port> [with <options>] [from <interface>]
                options := SSL, VERIFY

                accept $B$7$?@\B3$r$I$N%5!<%P$XCf7Q$9$k$+$r;XDj$9$k!#(B
                $BJ#?t9T$N(B connect $B$r;XDj$9$k$H!"%i%&%s%I%m%S%s5!G=$,F/$-!"(B
                $B@\B3MW5a$NEY$K0[$J$k%[%9%H$XCf7Q$7!"%5!<%PB&$NIi2YJ,;6(B
                $B$r?^$k!#(B
                $B#2$D0J>e$N%$%s%?%U%'!<%9$r;HMQ$7$F$$$?$j!"#1$D$N%$%s%?(B
                $B%U%'!<%9$K#2$D0J>e$N(BIP$B%"%I%l%9$r@_Dj$7$F$$$k;~!"(Bfrom 
                $B$r;XDj$9$k$3$H$G!"Aj<j$H@\B3$9$k%$%s%?%U%'!<%9$r;XDj$G(B
                $B$-$k!#(B

                $B0J2<$N%*%W%7%g%s$r;XDj$G$-$k!#(B
                SSL    - $B%5!<%P$X(B SSL $B$G@\B3$9$k!#(B
                VERIFY - $B%5!<%P$rG'>Z$9$k!#(B
                         client_cert_file $B$G;XDj$7$?G'>Z=q$r=pL>$7$?(B
                         $B%5!<%P$G$J$1$l$P@\B3$rCfCG$9$k!#(B
                         client_cert_file $B$rJ;$;$F5-=R$9$kI,MW$,$"$k!#(B

	service_type <service type>
	        <service type>:= "SSL Telnet" | "SSL Telnet or Telnet"

	        $B%G%U%)%k%H$G$OF)2aE*$JCf7Q$r9T$J$$$^$9$,!"(B
		$B$3$N%*%W%7%g%s$r;XDj$9$k$3$H$G!"FCDj$N%5!<%S%98~$1$N(B
	        $B=hM}$r9T$J$$$^$9!#(B

	        "SSL Telnet" $B$r;XDj$9$k$H!"%/%i%$%"%s%H$H$N@\B3;~$K(B
	        $B%/%i%$%"%s%H$,(B SSL$B0E9f2=5!G=$r%5%]!<%H$7$F$$$k$+$I$&$+(B
	        $B$r3NG'$7!"%5%]!<%H$7$F$$$k;~$O(B SSL $B$G@\B3$r9T$J$$$^$9!#(B
		$B%5%]!<%H$7$F$$$J$$;~$O@\B3$r5qH]$7$^$9!#(B

	        "SSL Telnet or Telnet" $B$O%/%i%$%"%s%H$,(B SSL $B$r%5%]!<%H(B
		$B$7$F$$$J$$$H$-!"DL>o$N(B telnet $B$G%5!<%P$XCf7Q$7$^$9!#(B

        entry <service name> {
                ...
              }

                $B$=$l$>$l$NCf7Q%5!<%S%9$K$D$$$F5-=R$9$k!#(B

                $BNc(B) SSL$B$G0E9f2=$5$l$?(B telnet $B$rI|9f2=$7$FAH?%Fb$N%5!<(B
                    $B%P$XCf7Q$9$k!#(B

                        entry "SSL Telnet" {
			        service_type "SSL telnet"
                                accept 8023 with SSL
                                connect internalhost:telnet
                        }
    [$B@-G=$K4X$9$k@_Dj(B]
        max_connection <num>     (default is 100)
                1$B%W%m%;%9$G(B accept $B$r9T$J$&@\B3?t$r;XDj$7$^$9!#(B
                2$B0J>e$r;XDj$7$?>l9g!"%/%i%$%"%s%H$+$i@\B3$5$l$k$H(B
                $B%/%i%$%"%s%H=hM}MQ$N;R%W%m%;%9$r@8@.$7!"?F%W%m%;%9$O(B
                $B:F$S@\B3BT$A>uBV$KLa$j$^$9!#(B
                1$B$r;XDj$7$?>l9g$O;R%W%m%;%9$r@8@.$;$:!"<+%W%m%;%9$,(B
                $B%/%i%$%"%s%H$r=hM}$7$^$9!#(B

        spare_servers <num>      (default is 1)
                $B#1$D$N%]!<%H$KBP$7$F@\B3BT$A$r9T$J$&%W%m%;%9?t$r;XDj$7(B
                $B$^$9!#(B
                $B$=$N%]!<%H$N:GBg@\B3?t$O(B
                max_connection x spare_servers $B$NCM$K$J$j$^$9!#(B

        do_fork       <TRUE or FALSE>   (default is depend on max_connection)
                TRUE $B$r;XDj$9$k$H!"%W%m%;%9$,%/%i%$%"%s%H$+$i$N@\B3MW(B
                $B5a$r<u$1$?;~!"$=$N%;%C%7%g%s$r=hM}$9$k$?$a$N;R%W%m%;%9(B
                $B$r@8@.$7!"?F%W%m%;%9$O:F$S@\B3BT$A$KLa$j$^$9!#(B
                $B$=$N$?$a!"@\B3$NEY$K;R%W%m%;%9$r@8@.$9$k;~4V$,H/@8$7$^(B
                $B$9!#(B

                FALSE $B$r;XDj$9$k$H!";R%W%m%;%9$r@8@.$;$:$K!"<+J,$G%;%C(B
                $B%7%g%s$r=hM}$7$^$9!#%W%m%;%9@8@.;~4V$r>J$/$3$H$,$G$-$^(B
                $B$9$,!"%;%C%7%g%s$,=*N;$9$k$^$G!"$=$N%W%m%;%9$O@\B3MW5a(B
                $B$r=hM}$G$-$^$;$s$N$G!"$"$i$+$8$a(B spare_servers $B$G$?$/(B
                $B$5$s$N@\B3BT$A%W%m%;%9$r@8@.$7$F$*$/I,MW$,$"$j$^$9!#(B
                $BF1;~@\B3?t$rBg$-$/$9$k$[$I%W%m%;%9$r$?$/$5$s@8@.$7$F$*(B
                $B$+$J$1$l$P$J$i$J$$$?$a!"%a%b%j$r>CHq$7$^$9!#(B

                $B@-G=$H%a%b%j;HMQNL$H$N%H%l!<%I%*%U$K$h$j!"@_Dj$O#2$D$N(B
                $B%Q%?!<%s$KJ,$1$i$l$^$9!#(B

                $BNc(B1) $BF1;~@\B3?t$O:GBg(B 10$B!#(B
                     $B>o$K(B 10 $B%W%m%;%9$,Av$C$F$$$k!#(B

                        spare_servers  10
                        do_fork        false

                $BNc(B2) $BF1;~@\B3?t$O:GBg(B 10$B!#(B
                     $B:GDc(B 2 $B%W%m%;%9$,Av$C$F$$$k!#(B
                     $BA4$/F1;~$K(B 2 $B$D$N@\B3MW5a$r=hM}$G$-!"0lJ}$,@\B3MW(B
                     $B5a$r<u$1$F;R%W%m%;%9$r@8@.$7$F$$$k4V$K?7$?$J@\B3(B
                     $B$,$-$?>l9g!"$b$&0lJ}$,@\B3MW5a$r<u$1$k$3$H$,$G$-(B
                     $B$k!#(B

                        spare_servers  2
                        max_connection 5
                        do_fork        true

    [$B%;%-%e%j%F%#$K4X$9$k@_Dj(B]
        allow <name> [ - <name2> ] [ / <mask> ]
        deny  <name> [ - <name2> ] [ / <mask> ]

                <name> := <hostname> | <IP address> | <keyword>
                <mask> := <netmask> | <network length>
                <keyword> := "ALL" | "NONE"

                IP $B%"%I%l%9$d%M%C%H%o!<%/C10L$G$N%"%/%;%9@)8f$r9T$J$$$^$9!#(B

                $BNc(B1)  bar.foo.com $B$H$$$&%[%9%H$+$i$N%"%/%;%9$N$_5v2D(B

                        deny    all
                        allow   bar.foo.com

                ex2) 172.16/16 $B$N%M%C%H%o!<%/$+$i$N%"%/%;%9$N$_5v2D(B

                        deny    all
                        allow   172.16.0.0/255.255.0.0

                        or

                        deny    all
                        allow   172.16.0.0/16

                ex3) 172.16/16 $B!A(B 172.31/16 $B$+$i$N%"%/%;%9$N$_5v2D(B
                     $B$?$@$7!"(B172.16.0.* $B$O5qH]$9$k(B

                        deny    all
                        allow   172.16.0.0/16 - 172.31.0.0/16
                        deny    172.16.0.0/24

        deny_wait       <nsec>        (default is 3)
                $B%/%i%$%"%s%H$+$i$N%"%/%;%9$r5qH]$7$?$H$-!"(B
                $B@\B3$r@Z$kA0$K;XDj$7$?IC?t(B wait $B$7$^$9!#(B

        CA_cert_file    <filename>
                CA$B%5!<%P$N(BPEM$B7A<0>ZL@=q$N%U%!%$%kL>$r;XDj$7$^$9!#(B
                accept $B$G(B SSL $B$r;HMQ$9$k>l9g!"$3$l$r;XDj$7$J$1$l$P$J$j(B
                $B$^$;$s!#(B

        CA_cert_path    <pathname>
                accept $B$G(B verity $B$r9T$J$&>l9g$O$3$l$r;XDj$7$J$1$l$P$J(B
                $B$j$^$;$s!#(B

        client_cert_file <filename>
                $B%/%i%$%"%s%H$N(BPEM$B7A<0G'>Z=q$N%U%!%$%kL>$r;XDj$7$^$9!#(B
                $B%5!<%PB&$G(B verify $B$r9T$J$C$F$$$k>l9g!"$3$l$r;XDj$7$J$1(B
                $B$l$P$J$j$^$;$s!#(B

        CA_make         <name> [, <days> [, <bits>]]
                CA$BG'>Z=q$rMQ0U$;$:$K(B SSL $B$rMxMQ$9$k$?$a$N%*%W%7%g%s$G$9!#(B
                bjorb $B5/F0;~$K4J0WG'>Z=q$r<+F0@8@.$7$^$9!#(B

                name $B$K$O(BCA$B$NL>A0$r5-=R$7$^$9!#(B
                days $B$K$O4J0WG'>Z=q$NM-8z4|4V$r@_Dj$7$^$9!#%G%U%)%k%H(B
                $B$O(B 365 $BF|!#(B
                bits $B$K$O(BRSA$B80$N%5%$%:$r;XDj$7$^$9!#80%5%$%:$,Bg$-$$$[(B
                $B$I2rFI$,:$Fq$K$J$j$^$9$,7W;;;~4V$,$+$+$j$^$9!#(B
                512, 1024, 2048 $B$J$I$,;XDj$G$-!"%G%U%)%k%H$O(B 512 $B%S%C%H!#(B

                CA_make $B$r;HMQ$9$k$H(B accpet $B$K(B SSL $B$r;XDj$G$-$k$h$&$K(B
                $B$J$j$^$9$,!"(BVERIFY $B$O;XDj$G$-$^$;$s!#(B

