Page Comparison

[global]
; The name given to identify this gateway instance. If the the database is shared between multiple gateways, this name MUST be unique across these gateways.
GatewayName = mft_waarp_gatewayudmg

; Default OS permission for created files
; FilePermissions = 700

; Default OS permission for created directories
; DirPermissions = 750

[paths]
; The root directory of the gateway. By default, it is the working directory of the process.
GatewayHome = /home/mftudmg

; The directory for all incoming files.
; DefaultInDir = in

; The directory for all outgoing files.
; DefaultOutDir = out

; The directory for all running transfer files.
; DefaultTmpDir = tmp

[log]
; All messages with a severity above this level will be logged. Possible values are DEBUG, INFO, WARNING, ERROR and CRITICAL.
Level = DEBUG

; The path to the file where the logs must be written. Special values 'stdout' and 'syslog' log respectively to the standard output and to the syslog daemon
; LogTo = stdout

; If LogTo is set on 'syslog', the logs will be written to this facility.
; SyslogFacility = local0

[admin]
; The address used by the admin interface.
Host = 0.0.0.0

; The port used by the admin interface. If the port is 0, a free port will automatically be chosen.
Port = 18080

; Path of the TLS certificate for the admin interface.
; TLSCert =

; Path of the key of the TLS certificate.
; TLSKey =

[database]
; Name of the RDBMS used for the gateway database. Possible values: sqlite, mysql, postgresql
Type = postgresql

; Address of the database
Address = localhost

; The name of the database
Name = mft_waarp_gatewayudmg

; The name of the gateway database user
User = mft_waarp_gatewayudmg_user

; The password of the gateway database user
Password = mft_waarp_gatewayudmg_password

; Path of the database TLS certificate file.
; TLSCert =

; Path of the key of the TLS certificate file.
; TLSKey =

; The path to the file containing the passphrase used to encrypt account passwords using AES
; AESPassphrase = passphrase.aes

[controller]
; The frequency at which the database will be probed for new transfers
Delay = 300s

; The maximum number of concurrent incoming transfers allowed on the gateway (0 = unlimited).
; MaxTransferIn = 0

; The maximum number of concurrent outgoing transfers allowed on the gateway (0 = unlimited).
; MaxTransferOut = 0

[sftp]
; Set to true to allow legacy and weak cipher algorithms: 3des-cbc, aes128-cbc, arcfour, arcfour128, arcfour256
; AllowLegacyCiphers = false

# mkdir -p /etc/mftudmg/auth_proxy

# Proxy Configuration
[proxy]
# Port, default "5000"
port = "5000"
# Network interface, default "0.0.0.0"
inet = "127.0.0.1"
# Enable recover on panic, default true, should be true for production environment
recover = true
# Enable Cross-Origin Resource Sharing (CORS), should be true for production environment
cors = true
# Enable Request Track ID, default true
tracker = true
# Enable Request Logguer, default true
logger = true
# Rate Limit IP Request over 1 second, default 0 (unlimited)
limit = 0
# Enable the Prometheus Metric Endpoint '/metric', default false
metrics = false

# Service 'local' with direct authentication on the waarp gatewaythe UDMG Server
[service.local]
# MFT Waarp Gateway UDMG Server Listen Protocol
protocol = "http"

[[service.local.targets]]
# MFT Waarp Gateway UDMG Server Hostname or IP
hostname = "localhost"
# MFT Waarp Gateway # UDMG Server Port
port = 18080

# Service 'mft' with direct authentication on the waarp gatewaythe UDMG Server
[service.mft]
# MFT Waarp Gateway # UDMG Server Listen Protocol
protocol = "http"

[[service.mft.targets]]
# MFT Waarp Gateway # UDMG Server Hostname or IP
hostname = "localhost"
# MFT Waarp Gateway # UDMG Server Port
port = 18080

# Proxy Configuration
[proxy]
# Port, default "5000"
port = "5000"
# Network interface, default "0.0.0.0"
inet = "127.0.0.1"
# Enable recover on panic, default true, should be true for production environment
recover = true
# Enable Cross-Origin Resource Sharing (CORS), should be true for production environment
cors = true
# Enable Request Track ID, default true
tracker = true
# Enable Request Logguer, default true
logger = true
# Rate Limit IP Request over 1 second, default 0 (unlimited)
limit = 0
# Enable the Prometheus Metric Endpoint '/metric', default false
metrics = false

# Service 'mft' with LDAP Authentication
[service.mft]
# MFT Waarp Gateway UDMG Server connection protocol(http or https)
protocol = "http"
# This is breaking glass option for admins, 
# the users in the admins list are authenticated directly on the MFT service, not with LDAP
admins = ["admin"]

[[service.mft.targets]]
# MFT Waarp Gateway # UDMG Server Hostname or IP
hostname = "localhost"
# MFT Waarp Gateway # UDMG Server Port
port = 18080

# Credentials for the synchronisation synchronization from LDAP to MFT service
# this user must have permission to create/update waarp gateway UDMG users
[service.mft.credential]
username = "ldap_sync"
password = "ldap_password"

# LDAP Configuration
[service.mft.auth.ldap]
# LDAP Server DC with OU
dn = "ou=users,dc=stonebranch,dc=com"
# LDAP Server FQDN or IP
hostname = "myldap.server.fqdn.com"
# LDAP Server Port
port = "1389"

# vi /etc/mftudmg/agent_proxy/agent.toml

[agent]
# MFT Agent Proxy Hostname or IP, and port
hostname = "0.0.0.0"
port = "2222"
# path to the SSH private key file
ssh_key = "/etc/mftudmg/agent_proxy/agent"
# path to the SSH public key file
ssh_key_pub = "/etc/mftudmg/agent_proxy/agent.pub"

# Agent Service User and password
username = "mft"
password = "61ee8b5601a84d5154387578466c8998848ba089"

[client]
# Target MFT Agent Proxy Hostname or IP, and port
hostname = "localhost"
port = "2222"

# path to the SSH private key file
ssh_key = "/etc/mftudmg/agent_proxy/client"
# path to the SSH public key file
ssh_key_pub = "/etc/mftudmg/agent_proxy/client.pub"

# Agent Service User and password
username = "mft"
password = "61ee8b5601a84d5154387578466c8998848ba089"

# Default TTL to Connection Retry
ttl="5s"

[client.api]
# Administrative API port
port="2280"

[gateway]
# MFT Waarp Gateway # UDMG Server Hostname or IP, and port
hostname = "localhost"
port = "18080"
# MFT Waarp Gateway UDMG Server Username/Password
username = "admin"
password = "admin_password"

# vi /etc/systemd/system/mft_waarp_gatewayudmg-server.service

[Unit]

Description=

UDMG Server

[Service]

Type=simple

User=

udmg
Group=

udmg
WorkingDirectory=/home/

udmg
ExecStart=/bin/sh -c '

/usr/local/

udmg-server server -c /etc/

udmg/udmg-server/server.ini'

 Restart=on-failure

  [Install]

 WantedBy=multi-user.target

# systemctl enable mft_waarp_gateway udmg-server.service
Created symlink /etc/systemd/system/multi-user.target.wants/mft_waarp_gatewayudmg-server.service → /etc/systemd/system/mft_waarp_gatewayudmg-server.service.

# systemctl start mft_waarp_gatewaystart udmg-server
# systemctl status mft_waarp_gateway
● mft_waarp_gatewaystatus udmg-server
● udmg-server.service - MFT Waarp Gateway UDMG server
Loaded: loaded ( /etc/systemd/system/mft_waarp_gatewayudmg-server.service; enabled; vendor preset: disabled)
Active: active (running) since Tue 2022-06-07 16:43:16 -03; 10s ago
Main PID: 24888 (waarpudmg-gatewaydserver)
Tasks: 6 (limit: 3509)
CPU: 11ms
CGroup: /system.slice/mft_waarp_gatewayudmg-server.service
└─24888 /usr/local/bin/waarpudmg-gatewayd server server -c c /etc/mft/waarp_gatewayudmg/udmg-server/server.ini

# vi /etc/systemd/system/mft_udmg-auth_-proxy-server.service

[Unit]
Description=MFT UDMG Auth Proxy server

[Service]
Type=simple
User=mftudmg
Group=mftudmg
WorkingDirectory=/home/mftudmg
Environment="MFTUDMG_AUTH_PROXY_CONFIG=/etc/mftudmg/auth_proxy/config.toml"
ExecStart=/bin/sh -c 'exec /usr/local/bin/mft_udmg-auth_-proxy_-server'
Restart=on-failure

[Install]
WantedBy=multi-user.target

# systemctl start mft_auth_proxystart udmg-auth-proxy-server
# systemctl status mft_auth_proxystatus udmg-auth-proxy-server
● mft_auth_proxy.service - MFT UDMG Auth Proxy server
Loaded: loaded ( /etc/systemd/system/mft_udmg-auth_-proxy-server.service; enabled; vendor preset: disabled)
Active: active (running) since Tue 2022-06-07 16:58:48 -03; 21s ago
Main PID: 25008 (mft_udmg-auth_-proxy_-server)
Tasks: 3 (limit: 3509)
CPU: 4ms
CGroup: /system.slice/mft_udmg-auth_-proxy-server.serviceservice
└─25008 /usr/local/bin/mft_auth_proxservicey_udmg-auth-proxy-server

# vi /etc/systemd/system/mft_udmg-agent_-proxy_-server.service

[Unit]

Description=

UDMG Agent

 Proxy server

[Service]

Type=simple

User=

udmg
Group=

udmg
WorkingDirectory=/home/

udmg
Environment="

UDMG_AGENT_PROXY_CONFIG=/etc/

udmg/agent

/

server.toml"

ExecStart=/bin/sh -c 'exec /usr/local/bin/

udmg-agent

-proxy

-server'

Restart=on-failure

[Install]

WantedBy=multi-user.target

# systemctl enable mft_agent_proxy_server.serviceenable udmg-agent-proxy-server
Created symlink /etc/systemd/system/multi-user.target.wants/mft_udmg-agent_-proxy_-server.service → /etc/systemd/system/mft_udmg-agent_-proxy_-server.service.