From 34893ff247f9aaa9ec7980fadf7090bf77795a8d Mon Sep 17 00:00:00 2001
From: Tony Mack <tmack@paris.CS.Princeton.EDU>
Date: Fri, 3 Dec 2010 17:16:52 -0500
Subject: [PATCH] added 'session_key_path' config parameter

---
 config/default_config.xml | 46 ++++++++++++++++++++++++---------------
 1 file changed, 28 insertions(+), 18 deletions(-)

diff --git a/config/default_config.xml b/config/default_config.xml
index 899d1736..f9fd5791 100644
--- a/config/default_config.xml
+++ b/config/default_config.xml
@@ -18,24 +18,34 @@ Thierry Parmentelat
       <description>Basic system variables.</description>
 
       <variablelist>
-	<variable id="interface_hrn" type="string">
-	  <name>Human readable name</name>
-	  <value>plc</value>
-	  <description>The human readable name for this interface.</description>
-	</variable>
-
-    <variable id="credential_schema" type="string">
-      <name>Credential Schema</name>
-      <value>/etc/sfa/credential.rng</value>
-      <description>The path to the default credential schema</description>
-    </variable>
-
-	<variable id="api_debug" type="boolean">
-	  <name>Debug</name>
-	  <value>false</value>
-	  <description>Flag to turn debug on.</description>
-	</variable>
-
+        <variable id="interface_hrn" type="string">
+          <name>Human readable name</name>
+          <value>plc</value>
+          <description>The human readable name for this interface.</description>
+        </variable>
+
+        <variable id="credential_schema" type="string">
+          <name>Credential Schema</name>
+          <value>/etc/sfa/credential.rng</value>
+          <description>The path to the default credential schema</description>
+        </variable>
+
+        <variable id="api_debug" type="boolean">
+          <name>Debug</name>
+          <value>false</value>
+          <description>Flag to turn debug on.</description>
+        </variable>
+
+        <variable id="session_key_path" type="string">
+            <name>User Session Keys Path </name>
+            <value>/var/lib/sfa/session_keys</value>
+            <description>Some services will peform operations on behalf of a user, but make
+            it look like the user is the one performing the operation. Doing this requires a 
+            valid key pair and credential for the user. This option defines the path where 
+            key pairs and credentials are generated and stored.
+            This functionality is used by the SFA web gui 
+            </description> 
+        </variable>
       </variablelist>
     </category>
 
-- 
2.43.0