Provided by: apf-server_0.8.4-1ubuntu3_amd64 bug


       afserver.conf - Configuration File for afserver


       Afserver  supports  several  mechanisms  to  supply configuration and run-time parameters:
       command line options, afserver.conf and hard-coded defaults. When the same information  is
       supplied   in  more  than  one  way,  the  highest  precedence  mechanism  is  used.  When
       configuration file is used  (option:  -f  FILE)  command  line  options  like  --hostname,
       --listenport,  --manageport  and  --pass  are ignored. Options from configuration file are
       taken before values from command line (with the  exception  of  --cerfile,  --keyfile  and
       --dateformat ). When something is not declared, hard-coded values are used.


       Afserver  uses  configuration  file,  which  name  is  supplied by the -f FILE option. The
       afserver.conf file is composed of two sections which have to be in fixed order.  In  first
       section  global  values  like  cerfile,  keyfile  and  logging options are set. The second
       section starts with first realm command and includes options describing  specific  realms.
       There may be several realm commands.


       cerfile FILE
         the name of the file with certificate (default: server-cert.pem)

       cacerfile FILE
         the  name  of  the  file  with  CA  certificates (if used, require clients to have valid

       cerdepth N
         the maximum depth of valid certificate-chains

       keyfile FILE
         the name of the file with RSA key (default: server.rsa)

       log LOGCMD
         log choosen information to file/socket

       dateformat FORMAT
         format of the date printed in logs (see 'man strftime' for details)  (default:  %d.%m.%Y
       %H:%M:%S).  Format  string  is  trimmed.  In order to include white characters into format
       string, use dots to mark beginning and end of the text.  If  the  dot  is  first  or  last
       character, it's removed. Only one character from the beginning and one from the end can be


       realm [NAME]
         starts configuration of the next realm. Name of the realm can be  specified  using  this

       hostname NAME
         used when creating listening sockets (default: '')

       listenport PORT
         listening port number - users connect to it (required at least one)

       manageport PORT
         manage port number - afclient connects to it (required at least one)

       pass PASSWORD
         password used for client identification (default: no password)

       users N
         the amount of users allowed to use this server (default: 5)

       timeout N
         the timeout value for the client's connection (default: 5)

       --maxidle N
         the maximum idle time for the client's connection (default: disabled)

       clients N
         the number of allowed clients to use this server (default: 1)

       raclients N
         the number of allowed clients in remote administration mode to use this server (default:

       usrpcli N
         the number of allowed users per client (default: $users)

       climode N
         strategy used to connect users with clients (default: 1)
         Available strategies:
           1. fill first client before go to next

       proto TYPE
         type of server (tcp|udp) - what protocol it will be operating for (default: tcp)

         ssl is not used to transfer data  (but  it's  still  used  to  establish  a  connection)
       (default: ssl is used)

         zlib is not used to compress data (default: zlib is used)

         listenports are temporary and differ for each client

         additional information about connections are logged

         try to obtain dns names of the computers rather than their numeric IP

         use ipv4 only

         use ipv6 only

         enable http proxy mode


       afclient.conf(5), afclient(1), afserver(1)


       Jeremian <jeremian [at]>


       Alex  Dyatlov  <alex  [at]>,  Simon  <scastro  [at]>, Ilia
       Perevezentsev <iliaper [at]>, Marco Solari  <marco.solari  [at]>,
       and Joshua Judson Rosen <rozzin [at]>


       Active  Port  Forwarder  is  distributed under the terms of the GNU General Public License
       v2.0 and is copyright (C) 2003-2007 jeremian  <jeremian  [at]>.  See  the  file
       COPYING for details.