NAME

ss5.ha - Contains directives for centralized configuration management

SYNOPSIS

ss5 usually reads the HA file, ss5.ha, in the /etc/opt/ss5 directory.

DESCRIPTION

To enable centralized configuration management, ss5 opens and reads peers list from ss5.ha file and propagate local configuration to them after load/reload command is received, using a propagate key as security mechanism. HA file contains also directives that must not be propagated to peers, such as <route>.

In the HA file, add one line for each peer. Each line should contain <peer> directive with the internet address of peer.

Adding centralized configuration management feature to ss5 requires 3 steps:

ROUTING ENTRIES

Route entries describe the addresses ss5 must bind to before CONNECT, BIND and UPSTREAM operations.

source

Could be host address or network address (source or destination if flag 's' o 'd')

bind-address

Must be host address

group

Could be filename in the /etc/ss5 directory containing usernames, a DN into a directory server or - (None). Not available for UDP requests.

flag

Could be 's' or 'd'. If =s, route is evaluated as source; if =d, route is evaluated as destination.

SEE ALSO

ss5(1), ss5.conf(5), ss5.pam(5), ss5.passwd(5), ss5srv(1), ss5_supa(5), ss5_gssapi(5)

AUTHOR

Send comments to matteo.ricchetti@libero.it