Customize this config file for your system. Search for two at-signs
("@") to find areas that definitely need changed.

This config is for a site which uses Cosign to protect the entire
site (and there's only one web site on the system), and the site
is running on SSL (https). Any other use will require changes. See
the original sample config installed with your filter for a full
list of possible tags.

Delete all of this commentary down to the "<?xml" line when you
save it, and remember that the run-time name is "cosign.dll.config".

Any questions or problems can be send to root at
aset.psu.edu.

=== Delete from here up ===
<?xml version="1.0"?>
<Cosign xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:noNamespaceSchemaLocation="iiscosign.xsd">

    <!-- All items are required unless otherwise noted and must
         appear in this order to be compliant with the schema. -->

  <!-- The certificate authority file used to verify the weblogin server's identity. -->
	<CAFilePath>C:\Program Files\IISCosign\SSL\</CAFilePath>

  <!-- Your server's certificate file. -->
	<ChainFilePath>C:\Program Files\IISCosign\SSL\@@server.name.cert</ChainFilePath>

  <!-- Your server's key file. -->
  <PrivateKeyFilePath>C:\Program Files\IISCosign\SSL\@@server.name.key</PrivateKeyFilePath>

	<Log>
    <!-- Location where cosign log files should be store. -->
		<Path>C:\Program Files\IISCosign\Logs</Path>
    <!-- How large the log files should become before a new file is created. -->
		<MaxSizeKB>4096</MaxSizeKB>
    <!-- Set to true to send any verbose output to the Application Log in the Event Viewer. -->
		<WriteDataToEventViewer>false</WriteDataToEventViewer>
	</Log>

	<CookieDB>
    <!-- Path to server's service cookie cache. -->
		<Path>C:\Program Files\IISCosign\CookieDB</Path>
    <!-- How long cached service cookies are good before checking with the login server. -->
		<CookieExpireTimeSeconds>60</CookieExpireTimeSeconds>
	</CookieDB>

	<LoginServer>
    <!-- DNS name of the login server -->
		<DNSName>webaccess.psu.edu</DNSName>

    <!-- URL on the login server where users supply credentials. -->
		<LoginURL>https://webaccess.psu.edu/?</LoginURL>

    <!-- URL on the server that notifies users of POST data loss. -->
		<LoginPostErrorURL>https://webaccess.psu.edu/post_error.html</LoginPostErrorURL>

    <!-- Port number the filter uses to talk to the login server. -->
	        <Port>6663</Port>		
	</LoginServer>

  <!-- Number of maximum connections to be used when communicating with the login servers. -->
	<ConnectionPoolSize>15</ConnectionPoolSize>

	<!-- optional, set flags on the cosign service cookie -->
	<!-- Default values are Secure=true and HttpOnly=false -->
	<!-- Cookies>
		<Secure>true</Secure>
		<HttpOnly>false</HttpOnly>
	</Cookies -->

	<!-- only needed if using cosignlogout.dll -->
	<!-- LogoutURL>https://webaccess.psu.edu/cgi-bin/logout</LogoutURL -->
	
	<Service>
		<!-- Required.  "cosign-" prefix also required. Name of your cosign service. -->
		<Name>cosign-@@your-site-name</Name>

		<!-- IISDescription refers to the name that appears in the IIS Manager. -->
		<IISDescription>@@Default Web Site</IISDescription>
		
		<Protected>/</Protected>

	</Service>
  
</Cosign>