1 | oscam.conf(5) oscam.conf(5)
|
---|
2 |
|
---|
3 |
|
---|
4 |
|
---|
5 | NAME
|
---|
6 | oscam.conf - main configuration file for OSCam
|
---|
7 |
|
---|
8 | SYNOPSIS
|
---|
9 | The main configuration file for OSCam contains global parameters such
|
---|
10 | as debugging, logging, monitor, protocols and anti-cascading. sections
|
---|
11 | in oscam.conf are nonrecurring. The [global] section is required. All
|
---|
12 | other sections are optional.
|
---|
13 |
|
---|
14 | DESCRIPTIONS
|
---|
15 | The [global] section
|
---|
16 | serverip = IP address
|
---|
17 | bind service to specified IP address, default:all
|
---|
18 |
|
---|
19 | logfile = filename|/dev/null|/dev/tty|syslog
|
---|
20 | logging target, default: /var/log/oscam.log
|
---|
21 |
|
---|
22 | disablelog = 0|1
|
---|
23 | 1 = disable log file, default:0
|
---|
24 |
|
---|
25 | pidfile = filename
|
---|
26 | PID file, default:no PID file
|
---|
27 |
|
---|
28 | usrfile = filename
|
---|
29 | log file for user logging, default:none
|
---|
30 |
|
---|
31 | log file format:
|
---|
32 |
|
---|
33 | date
|
---|
34 | time
|
---|
35 | CWs per second
|
---|
36 | username
|
---|
37 | IP address of client
|
---|
38 | TCP/IP port
|
---|
39 | CWs found
|
---|
40 | CWs from cache
|
---|
41 | CWs not found
|
---|
42 | CWs ignored
|
---|
43 | CWs timed out
|
---|
44 | CWs tunneled
|
---|
45 | login time in unix/POSIX format
|
---|
46 | logout time in unix/POSIX format
|
---|
47 | protocol
|
---|
48 |
|
---|
49 | cwlogdir = path
|
---|
50 | directory for CW logging, default:none
|
---|
51 |
|
---|
52 | clienttimeout = seconds
|
---|
53 | value for client process to wait for key, default:5
|
---|
54 |
|
---|
55 | fallbacktimeout = seconds
|
---|
56 | time falling back to fallback reader, default:2
|
---|
57 |
|
---|
58 | clientmaxidle = seconds
|
---|
59 | value for client process being idle before disconnect, default:120
|
---|
60 |
|
---|
61 | cachedelay = milli-seconds
|
---|
62 | value to delay cached requests , default:0
|
---|
63 |
|
---|
64 | bindwait = seconds
|
---|
65 | value to wait for bind request to complete, default:120
|
---|
66 |
|
---|
67 | netprio = priority
|
---|
68 | network priority, default:system given
|
---|
69 |
|
---|
70 | resolvedelay = seconds
|
---|
71 | delay for DNS resolving, default:30
|
---|
72 |
|
---|
73 | sleep = minutes
|
---|
74 | time waiting for inactive users, default:none, can be overwritten
|
---|
75 | per user in oscam.user
|
---|
76 |
|
---|
77 | unlockparental = 0|1
|
---|
78 | 1 = unlock parental mode option to disable Seca pin code request for
|
---|
79 | adult movie, default:0
|
---|
80 |
|
---|
81 | nice = -20..+20
|
---|
82 | system priority, default:99
|
---|
83 |
|
---|
84 | serialreadertimeout = milli-seconds
|
---|
85 | timeout for serial reader, default:1500
|
---|
86 |
|
---|
87 | maxlogsize = kbytes
|
---|
88 | max log file size, default:10
|
---|
89 |
|
---|
90 | waitforcards = 0|1
|
---|
91 | 1 = wait for local SCs on startup before opening network ports,
|
---|
92 | default:0
|
---|
93 |
|
---|
94 | preferlocalcards = 0|1
|
---|
95 | 1 = try decoding on local cards first, default:0
|
---|
96 |
|
---|
97 | The [monitor] section
|
---|
98 | port = 0|port
|
---|
99 | UDP port for monitor, port=0 monitor disabled, default:0
|
---|
100 |
|
---|
101 | serverip = IP address
|
---|
102 | bind service to specified IP address, default:all
|
---|
103 |
|
---|
104 | nocrypt = IP address|IP address range[,IP address|IP address range]...
|
---|
105 | unsecured monitor connection, default:none
|
---|
106 |
|
---|
107 | example: nocrypt = 127.0.0.1,192.168.0.0-192.168.255.255
|
---|
108 |
|
---|
109 | aulow = minutes
|
---|
110 | time no EMM occurs so that client is set to low, default:30
|
---|
111 |
|
---|
112 | monlevel = 0|1|2|3|4
|
---|
113 | monitor level:
|
---|
114 |
|
---|
115 | 0 = no access to monitor
|
---|
116 | 1 = only server and own procs
|
---|
117 | 2 = all procs, but viewing only, default
|
---|
118 | 3 = all procs, reload of oscam.user possible
|
---|
119 | 4 = complete access
|
---|
120 |
|
---|
121 | monlevel can be overwritten per user in oscam.user
|
---|
122 |
|
---|
123 | hideclient_to = seconds
|
---|
124 | time to hide clients in the monitor if not sending requests, 0 =
|
---|
125 | disabled, default:0
|
---|
126 |
|
---|
127 |
|
---|
128 | The [webif] section (only if web interface module enabled)
|
---|
129 | httpport = port
|
---|
130 | port for web interface, 0 = disabled, default:none, required
|
---|
131 |
|
---|
132 | httpuser = username
|
---|
133 | username for password protection, default:none
|
---|
134 |
|
---|
135 | httppwd = password
|
---|
136 | password for password protection, default:none
|
---|
137 |
|
---|
138 | httpcss = path
|
---|
139 | path for external CSS file, default:none
|
---|
140 |
|
---|
141 | httptpl = path
|
---|
142 | path for external templates, default:none
|
---|
143 |
|
---|
144 | httprefresh = seconds
|
---|
145 | status refresh in seconds, default:none
|
---|
146 |
|
---|
147 | httptpl = path
|
---|
148 | path for external templates, default:none
|
---|
149 |
|
---|
150 | httphideidleclients = 0|1
|
---|
151 | 1 = enables hiding clients after idle time set in parameter hide
|
---|
152 | client_to, default:0
|
---|
153 |
|
---|
154 | httpscript = path
|
---|
155 | path to an executable script which you wish to start from web inter
|
---|
156 | face, default:none
|
---|
157 |
|
---|
158 | httpallowed = IP address|IP address range[,IP address|IP address
|
---|
159 | range]...
|
---|
160 | http web interface connections allowed, default:none
|
---|
161 | example: httpallowed = 127.0.0.1,192.168.0.0-192.168.255.255
|
---|
162 |
|
---|
163 | The [camd33] section
|
---|
164 | port = 0|port
|
---|
165 | TCP/IP port for camd 3.3x clients, 0 = disabled, default:0
|
---|
166 |
|
---|
167 | serverip = IP address
|
---|
168 | bind service to specified IP address, default:all
|
---|
169 |
|
---|
170 | nocrypt = IP address|IP address range[,IP address|IP address range]...
|
---|
171 | unsecured camd 3.3x client connection, default:none
|
---|
172 |
|
---|
173 | example: nocrypt = 127.0.0.1,192.168.0.0-192.168.255.255
|
---|
174 |
|
---|
175 | passive = 0|1
|
---|
176 | 1=force passive camd 3.3x client, default:0
|
---|
177 |
|
---|
178 | key = 128 bit key
|
---|
179 | key for camd 3.3x client encryption, default:none
|
---|
180 |
|
---|
181 | example: key = 01020304050607080910111213141516
|
---|
182 |
|
---|
183 | The [camd35] section
|
---|
184 | port = 0|port
|
---|
185 | UDP port for camd 3.5x clients, 0 = disabled, default:0
|
---|
186 |
|
---|
187 | serverip = IP address
|
---|
188 | bind service to specified IP address, default:all
|
---|
189 |
|
---|
190 | The [newcamd] section
|
---|
191 | port = port@CAID[:ident][,ident]...[;port@CAID[:ident][,ident]...]...
|
---|
192 | TCP port/CAID/ident definitions, default:none
|
---|
193 |
|
---|
194 | example: port = 10000@0100:100000;20000@0200:200000,300000,400000
|
---|
195 |
|
---|
196 | Each CAID requires a separate port.
|
---|
197 |
|
---|
198 | serverip = IP address
|
---|
199 | bind service to specified IP address, default:all
|
---|
200 |
|
---|
201 | allowed = IP address|IP address range[,IP address|IP address range]...
|
---|
202 | client connections allowed from, default:none
|
---|
203 |
|
---|
204 | example: allowed = 127.0.0.1,192.168.0.0-192.168.255.255
|
---|
205 |
|
---|
206 | keepalive = 0|1
|
---|
207 | 0 = disable keepalive, default:1
|
---|
208 |
|
---|
209 | key = DES key
|
---|
210 | key for newcamd client encryption, default:none
|
---|
211 |
|
---|
212 | example key = 0102030405060708091011121314
|
---|
213 |
|
---|
214 | The [radegast] section
|
---|
215 | port = 0|port
|
---|
216 | TCP/IP port for radegast clients, 0=disabled, default:0
|
---|
217 |
|
---|
218 | serverip = IP address
|
---|
219 | bind service to specified IP address, default:all
|
---|
220 |
|
---|
221 | allowed = IP address|IP address range[,IP address|IP address range]...
|
---|
222 | client connections allowed from, default:none
|
---|
223 |
|
---|
224 | example: allowed = 127.0.0.1,192.168.0.0-192.168.255.255
|
---|
225 |
|
---|
226 | user = username
|
---|
227 | user name for radegast client
|
---|
228 |
|
---|
229 | The [serial] section
|
---|
230 | device = <user>@<device>[:baud][?option1=value1[&option2=value2]]
|
---|
231 | parameters:
|
---|
232 | user = account
|
---|
233 | device = serial device name
|
---|
234 | option = timeout = milli-seconds, timeout for connection,
|
---|
235 | default:50
|
---|
236 | delay = milli-seconds, additional delay between two
|
---|
237 | characters, default:0
|
---|
238 |
|
---|
239 | supported serial devices:
|
---|
240 | HSIC (humax sharing interface client)
|
---|
241 | SSSP (simple serial sharing protocol)
|
---|
242 | bomba (BOMBA firmware)
|
---|
243 | dsr9500 (DSR 9500)
|
---|
244 |
|
---|
245 | The [cs357x] section
|
---|
246 | port = 0|port
|
---|
247 | UDP port for camd 3.57x clients, 0 = disabled, default:0
|
---|
248 |
|
---|
249 | serverip = IP address
|
---|
250 | bind service to specified IP address, default:all
|
---|
251 |
|
---|
252 | suppresscmd08 = 0|1
|
---|
253 | 0 = CMD08 enabled, 1 = CMD08 disabled, default:0
|
---|
254 |
|
---|
255 | The [cs378x] section
|
---|
256 | port = 0|port@CAID[:ident][,ident]...[;port@CAID[:ident][,ident]...]...
|
---|
257 | TCP port/CAID/ident definitions for camd 3.78x clients,0 = disabled,
|
---|
258 | default:0
|
---|
259 |
|
---|
260 | example: port = 10000@0100:100000;20000@0200:200000,300000,400000
|
---|
261 |
|
---|
262 | Each CAID requires a separate port.
|
---|
263 |
|
---|
264 | serverip = IP address
|
---|
265 | bind service to specified IP address, default:all
|
---|
266 |
|
---|
267 | suppresscmd08 = 0|1
|
---|
268 | 0 = CMD08 enabled, 1 = CMD08 disabled, default:0
|
---|
269 |
|
---|
270 | The [cccam] section
|
---|
271 | port = 0|port
|
---|
272 | TCP/IP port for CCcam clients, 0 = disabled, default:0
|
---|
273 |
|
---|
274 | version = <main version>.<version>.<sub version>
|
---|
275 | define CCcam version, default:none
|
---|
276 |
|
---|
277 | example: version = 1.2.34
|
---|
278 |
|
---|
279 | build = <4-digit number>
|
---|
280 | define CCcam build, default:none
|
---|
281 |
|
---|
282 | example: build = 5678
|
---|
283 |
|
---|
284 | reshare = level
|
---|
285 | reshare level for CCcam clients, default:none
|
---|
286 |
|
---|
287 | 0 = no resharing
|
---|
288 | 1 = resharing for direct peer only
|
---|
289 | 2 = resharing for direct peer and next level
|
---|
290 | x = resharing for direct peer and next x level
|
---|
291 |
|
---|
292 | The [gbox] section
|
---|
293 | password = password
|
---|
294 | password for gbox server
|
---|
295 |
|
---|
296 | maxdist = distance
|
---|
297 | maximum distance to gbox servers, default:5
|
---|
298 |
|
---|
299 | ignorelist = filename
|
---|
300 | listing of providers to be ignored, format: G:{<CAID><provider ID>},
|
---|
301 | default:none
|
---|
302 |
|
---|
303 | example: G:{01001234}
|
---|
304 |
|
---|
305 | onlineinfos = filename
|
---|
306 | file to store online information, default:none
|
---|
307 |
|
---|
308 | cardinfos = filename
|
---|
309 | file to store card information, default:none
|
---|
310 |
|
---|
311 | locals = <CAID><provider ID>[,<CAID><provider ID>]...
|
---|
312 | backwards sharing of local cards,default:none
|
---|
313 |
|
---|
314 | example: locals = 01001234,02005678
|
---|
315 |
|
---|
316 | The [dvbapi] section (only if DVB API module enabled)
|
---|
317 | enabled = 0|1
|
---|
318 | 1 = DVB API enabled, default:0
|
---|
319 |
|
---|
320 | user = username
|
---|
321 | user name for DVB API client, default:anonymous
|
---|
322 |
|
---|
323 | ignore = <CAID>[,<CAID>]...
|
---|
324 | CAIDs to be ignored, default:none
|
---|
325 |
|
---|
326 | priority = <CAID>:<provider ID>[,CAID:<provider ID>]...
|
---|
327 | CAIDs and provider IDs to be prioritized, default:CAIDs and provider
|
---|
328 | IDs of local SCs will be prioritized
|
---|
329 |
|
---|
330 | au = 0|1
|
---|
331 | 1 = enable AU, default:0
|
---|
332 |
|
---|
333 | boxtype = dbox2|dreambox|ufs910
|
---|
334 | set boxtype, auto detection of DVB API will be aspired,
|
---|
335 | default:dreambox
|
---|
336 |
|
---|
337 | The [anticasc] section (only if anti-cascading enabled)
|
---|
338 | enabled = 0|1
|
---|
339 | 1 = enabled anti-cascading, default:0
|
---|
340 |
|
---|
341 | numusers = quantity
|
---|
342 | anti-cascading: user per account, 0 = anti-cascading disabled,
|
---|
343 | default:0
|
---|
344 |
|
---|
345 | sampletime = minutes
|
---|
346 | duration of sample, default:2
|
---|
347 |
|
---|
348 | samples = quantity
|
---|
349 | quantity of samples over limit, default:10
|
---|
350 |
|
---|
351 | penalty = 0|1|2
|
---|
352 | level of penalty:
|
---|
353 |
|
---|
354 | 0 = only logging
|
---|
355 | 1 = send fake CWs
|
---|
356 | 2 = disbable user temporary
|
---|
357 |
|
---|
358 | default:0, penalty can be overwritten per user in oscam.user
|
---|
359 |
|
---|
360 | aclogfile = filename
|
---|
361 | file for anti-cascading logging, default:none
|
---|
362 |
|
---|
363 | fakedelay = milli-seconds
|
---|
364 | fake delay time, default:1000
|
---|
365 |
|
---|
366 | denysamples = quantity
|
---|
367 | How many samples should be penalized?, default:8
|
---|
368 |
|
---|
369 | MONITOR
|
---|
370 | monitor commands:
|
---|
371 |
|
---|
372 | login <user> <password> = login (for unencrypted connections only)
|
---|
373 | exit = exit monitor
|
---|
374 | log <on|onwohist|off> = enable|enable without hitory|disable
|
---|
375 | logging for 2 minutes
|
---|
376 | status = list of current processes and clients
|
---|
377 | shutdown = showdown OSCam
|
---|
378 | reload = reinit user db, clients and anti-cascading,
|
---|
379 | for newcamd connections: after reloading
|
---|
380 | the ident, please restart newcamd client
|
---|
381 | details <PID> = details about selected PID
|
---|
382 | debug <level> = set debug level (monlevel > 3 required)
|
---|
383 | debug level mask:
|
---|
384 | 0 = no debugging (default)
|
---|
385 | 2 = ATR parsing info, ECM dumps, CW dumps
|
---|
386 | 4 = traffic from/to the reader
|
---|
387 | 8 = traffic from/to the clients
|
---|
388 | 16 = traffic to the reader-device on IFD
|
---|
389 | layer
|
---|
390 | 32 = traffic to the reader-device on I/O
|
---|
391 | layer
|
---|
392 | 63 = debug all
|
---|
393 | version = show OSCam version
|
---|
394 |
|
---|
395 | WEB INTERFACE
|
---|
396 | template system
|
---|
397 |
|
---|
398 | The web interface allows you to create your own template. For devel
|
---|
399 | oping your own template request the orignal template with the non-
|
---|
400 | linked page savetemplates.html. Store your own template in the
|
---|
401 | directory specified by httptpl.
|
---|
402 |
|
---|
403 | SSL connection to the web interface
|
---|
404 |
|
---|
405 | The Apache module mod_proxy can be used to proxy requests to the web
|
---|
406 | interface. With this module its also possible to use a SSL connec
|
---|
407 | tion to the web interface.
|
---|
408 |
|
---|
409 | ProxyRequests Off
|
---|
410 | <Proxy *>
|
---|
411 | Order deny,allow
|
---|
412 | Allow from all
|
---|
413 | </Proxy>
|
---|
414 | ProxyPass /oscam/ http://localhost:8080/
|
---|
415 | ProxyPassReverse /oscam/ http://localhost:8080/
|
---|
416 |
|
---|
417 | For further information please read the Apache documentation.
|
---|
418 |
|
---|
419 | known issues
|
---|
420 |
|
---|
421 | Login is not possible by now with the Safari browser because of
|
---|
422 | incorrect stale flag handling. Increasing the AUTHNONCEVALIDSECS in
|
---|
423 | oscam-http.h would be a workaround, but also a small security risk.
|
---|
424 |
|
---|
425 | EXAMPLES
|
---|
426 | [global]
|
---|
427 | logfile = /var/log/oscam/oscam.log
|
---|
428 | usrfile = /var/log/oscam/oscamuser.log
|
---|
429 | pidfile = /var/run/oscam.pid
|
---|
430 |
|
---|
431 | waitforcards = 1
|
---|
432 |
|
---|
433 | [monitor]
|
---|
434 | port = 988
|
---|
435 | monlevel = 1
|
---|
436 | nocrypt = 127.0.0.1
|
---|
437 |
|
---|
438 | [newcamd]
|
---|
439 | key = 0102030405060708091011121314
|
---|
440 | port = 10000@0100:100000;20000@0200:200000,300000,400000
|
---|
441 |
|
---|
442 | [radegast]
|
---|
443 | port = 30000
|
---|
444 | user = radegastuser
|
---|
445 | allowed = 127.0.0.1,192.168.0.0-192.168.255.255
|
---|
446 |
|
---|
447 | [camd33]
|
---|
448 | port = 40000
|
---|
449 | serverip = 192.168.0.1
|
---|
450 | key = 01020304050607080910111213141516
|
---|
451 |
|
---|
452 | [cs378x]
|
---|
453 | port = 50000@0300:600000
|
---|
454 |
|
---|
455 | SEE ALSO
|
---|
456 | list_smargo(1), oscam(1), oscam.user(5), oscam.server(5),
|
---|
457 | oscam.srvid(5), oscam.guess(5), oscam.cert(5), oscam.services(5),
|
---|
458 | oscam.ird(5), oscam.ac(5)
|
---|
459 |
|
---|
460 |
|
---|
461 |
|
---|
462 | oscam.conf(5)
|
---|