--- loncom/loncapa_apache.conf 2006/08/29 14:21:17 1.154
+++ loncom/loncapa_apache.conf 2012/03/18 21:56:53 1.214
@@ -1,7 +1,7 @@
##
## loncapa_apache.conf -- Apache HTTP LON-CAPA configuration file
##
-## $Id: loncapa_apache.conf,v 1.154 2006/08/29 14:21:17 albertel Exp $
+## $Id: loncapa_apache.conf,v 1.214 2012/03/18 21:56:53 raeburn Exp $
##
#
@@ -35,8 +35,14 @@ ExtendedStatus On
#
# ===================================================================== Aliases
+Alias /zipspool/ /home/httpd/zipspool/
Alias /prtspool/ /home/httpd/prtspool/
+Alias /captchaspool/ /home/httpd/captchaspool/
+Alias /webdav/ /home/httpd/html/priv/
ScriptAlias /cgi-bin/ "/home/httpd/cgi-bin/"
+
+ DAVLockDB /home/httpd/webdav/DAVLock
+
# ================================================================= Directories
@@ -48,7 +54,24 @@ PerlCleanupHandler Apache::lonacc::clean
PerlAuthenHandler Apache::checkauthen
PerlSetVar lonOtherAuthen no
+
+ PerlAuthenHandler Apache::lonshibauth
+ PerlSetVar lonOtherAuthen yes
+ PerlSetVar lonOtherAuthenType Shibboleth
+
+
#PerlWarn On
+
+PerlAuthenHandler 'sub { return OK }'
+
+
+# Send proper expires header to avoid unnecessary HTTP request for static content
+
+ ExpiresActive On
+ ExpiresDefault "access plus 12 hours"
+ Header set Cache-Control "public, no-transform"
+
+
AuthType LONCAPA
@@ -93,6 +116,18 @@ SetHandler perl-script
PerlHandler Apache::portfolio
+
+AuthType LONCAPA
+Require valid-user
+PerlAuthzHandler Apache::lonacc
+SetHandler perl-script
+PerlHandler Apache::lonpdfupload
+ErrorDocument 403 /adm/login
+ErrorDocument 404 /adm/notfound.html
+ErrorDocument 406 /adm/roles
+ErrorDocument 500 /adm/errorhandler
+
+
PerlAccessHandler Apache::lontokacc
PerlCleanupHandler Apache::lontokacc::removefile
@@ -103,6 +138,8 @@ PerlCleanupHandler Apache::lonacc::clean
AuthType LONCAPA
Require valid-user
PerlAuthzHandler Apache::lonacc
+PerlHandler Apache::londatecheck
+PerlHandler Apache::lonipcheck
PerlHeaderParserHandler Apache::lonuploadrep
ErrorDocument 403 /adm/login
ErrorDocument 404 /adm/notfound.html
@@ -199,6 +236,8 @@ AuthType LONCAPA
Require valid-user
PerlAuthzHandler Apache::lonacc
SetHandler perl-script
+PerlHandler Apache::londatecheck
+PerlHandler Apache::lonipcheck
PerlHandler Apache::lonsimplepage
ErrorDocument 404 /adm/notfound.html
ErrorDocument 406 /adm/notinit.html
@@ -211,6 +250,7 @@ Require valid-user
PerlAuthzHandler Apache::lonacc
SetHandler perl-script
PerlHandler Apache::londatecheck
+PerlHandler Apache::lonipcheck
PerlHandler Apache::lonbulletin
ErrorDocument 404 /adm/notfound.html
ErrorDocument 406 /adm/notinit.html
@@ -228,30 +268,51 @@ ErrorDocument 406 /adm/notinit.html
ErrorDocument 500 /adm/errorhandler
-
+
AuthType LONCAPA
Require valid-user
PerlAuthzHandler Apache::loncacc
SetHandler perl-script
-PerlHandler Apache::lonconstruct
ErrorDocument 403 /adm/login
ErrorDocument 404 /adm/notfound.html
ErrorDocument 406 /adm/unauthorized
ErrorDocument 500 /adm/errorhandler
-
-PerlAccessHandler Apache::lonracc
+
+
+
+ AuthType Basic
+ AuthName "LONCAPA username,domain"
+ Require valid-user
+ SSLRequireSSL
+ PerlAuthenHandler Apache::lonwebdavauth
+ PerlAuthzHandler Apache::lonwebdavacc
+ Dav On
+ DirectoryIndex index.missing
+ Options Indexes FollowSymLinks
+ ErrorDocument 403 /adm/nowebdav.html
+ ErrorDocument 404 /adm/notfound.html
+ ErrorDocument 406 /adm/unauthorized
+ ErrorDocument 500 /adm/errorhandler
+
+
+
+ RewriteEngine on
+ RewriteRule .* http://%{HTTP_HOST}/adm/nowebdav.html [L]
+
+
+
+
+
+ RewriteEngine on
+ RewriteRule .* http://%{HTTP_HOST}/adm/nowebdav.html [L]
+
+
-
-AuthType LONCAPA
-Require valid-user
-PerlAuthzHandler Apache::loncacc
-ErrorDocument 403 /adm/login
-ErrorDocument 404 /adm/notfound.html
-ErrorDocument 406 /adm/unauthorized
-ErrorDocument 500 /adm/errorhandler
+
+PerlAccessHandler Apache::lonracc
@@ -276,24 +337,35 @@ ErrorDocument 406 /adm/roles
ErrorDocument 413 /adm/overloaded.txt
ErrorDocument 500 /adm/errorhandler
+
+
+AuthType LONCAPA
+Require valid-user
+PerlAuthzHandler Apache::lonacc
+ErrorDocument 403 /adm/login
+ErrorDocument 404 /adm/notfound.html
+ErrorDocument 406 /adm/roles
+ErrorDocument 413 /adm/overloaded.txt
+ErrorDocument 500 /adm/errorhandler
+
# ------------------------------------------------------------------------- RAT
-
+
SetHandler perl-script
PerlHandler Apache::lonratedt
-
+
SetHandler perl-script
PerlHandler Apache::lonratedt
-
+
SetHandler perl-script
PerlHandler Apache::lonratsrv
-
+
SetHandler perl-script
PerlHandler Apache::lonratmenu
@@ -317,7 +389,7 @@ PerlCleanupHandler Apache::lonindexer::c
PerlCleanupHandler Apache::lonacc::cleanup
-
+
SetHandler perl-script
PerlHandler Apache::lontex
@@ -332,7 +404,7 @@ SetHandler perl-script
PerlHandler Apache::lonsequence
-
+
PerlAccessHandler Apache::publiccheck
SetHandler perl-script
PerlHandler Apache::lonmeta
@@ -349,26 +421,34 @@ PerlHandler Apache::lonmeta
-
+
SetHandler perl-script
PerlHandler Apache::lonrights
-
+
SetHandler perl-script
PerlHandler Apache::londatecheck
+PerlHandler Apache::lonipcheck
PerlHandler Apache::lonxml
-
+
SetHandler perl-script
PerlHandler Apache::lonhomework
+
+SetHandler perl-script
+PerlHandler Apache::lonxml
+
+
AuthType LONCAPA
Require valid-user
PerlAuthzHandler Apache::lonacc
+PerlHandler Apache::londatecheck
+PerlHandler Apache::lonipcheck
SetHandler perl-script
PerlHandler Apache::lonwrapper
ErrorDocument 403 /adm/login
@@ -419,6 +499,26 @@ ErrorDocument 403 /adm/login
ErrorDocument 500 /adm/errorhandler
+
+AuthType LONCAPA
+Require valid-user
+PerlAuthzHandler Apache::lonacc
+SetHandler perl-script
+PerlHandler Apache::lonsearchcourse
+ErrorDocument 403 /adm/login
+ErrorDocument 500 /adm/errorhandler
+
+
+
+AuthType LONCAPA
+Require valid-user
+PerlAuthzHandler Apache::lonacc
+SetHandler perl-script
+PerlHandler Apache::lonindexcourse
+ErrorDocument 403 /adm/login
+ErrorDocument 500 /adm/errorhandler
+
+
AuthType LONCAPA
Require valid-user
@@ -448,6 +548,7 @@ PerlAuthzHandler Apache::lonacc
SetHandler perl-script
PerlHandler Apache::lonroles
ErrorDocument 403 /adm/login
+ErrorDocument 409 /adm/preferences?action=lockwarning
ErrorDocument 500 /adm/errorhandler
@@ -461,14 +562,24 @@ ErrorDocument 403 /adm/login
ErrorDocument 500 /adm/errorhandler
-
+
AuthType LONCAPA
Require valid-user
PerlAuthzHandler Apache::lonacc
SetHandler perl-script
-PerlHandler Apache::lonremote
+PerlHandler Apache::lonpickresource
ErrorDocument 403 /adm/login
-ErrorDocument 500 /adm/errorhandler
+ErrorDocument 500 /adm/errorhandler
+
+
+
+AuthType LONCAPA
+Require valid-user
+PerlAuthzHandler Apache::lonacc
+SetHandler perl-script
+PerlHandler Apache::lonpickauthor
+ErrorDocument 403 /adm/login
+ErrorDocument 500 /adm/errorhandler
@@ -481,6 +592,17 @@ ErrorDocument 403 /adm/login
ErrorDocument 500 /adm/errorhandler
+
+AuthType LONCAPA
+Require valid-user
+PerlAuthzHandler Apache::lonacc
+SetHandler perl-script
+PerlHandler Apache::lonpickuser
+ErrorDocument 403 /adm/login
+ErrorDocument 406 /adm/roles
+ErrorDocument 500 /adm/errorhandler
+
+
AuthType LONCAPA
Require valid-user
@@ -516,6 +638,16 @@ PerlHandler Apache::restrictedaccess
ErrorDocument 500 /adm/errorhandler
+
+PerlAccessHandler Apache::publiccheck
+AuthType LONCAPA
+Require valid-user
+SetHandler perl-script
+PerlAuthzHandler Apache::lonacc
+PerlHandler Apache::blockedaccess
+ErrorDocument 500 /adm/errorhandler
+
+
AuthType LONCAPA
Require valid-user
@@ -523,6 +655,7 @@ PerlAuthzHandler Apache::lonacc
SetHandler perl-script
PerlHandler Apache::lonlogout
ErrorDocument 403 /adm/login
+ErrorDocument 409 /adm/preferences?action=lockwarning
ErrorDocument 500 /adm/errorhandler
@@ -546,6 +679,21 @@ SetHandler perl-script
PerlHandler Apache::migrateuser
+
+
+ AuthType shibboleth
+ ShibUseEnvironment On
+ ShibRequestSetting requireSession 1
+ ShibRequestSetting redirectToSSL 443
+ require valid-user
+ PerlAuthzHandler Apache::lonshibacc
+ PerlAuthzHandler Apache::lonacc
+
+
+ PerlTypeHandler Apache::lonnoshib
+
+
+
AuthType LONCAPA
Require valid-user
@@ -566,16 +714,6 @@ ErrorDocument 403 /adm/login
ErrorDocument 500 /adm/errorhandler
-
-AuthType LONCAPA
-Require valid-user
-PerlAuthzHandler Apache::lonacc
-SetHandler perl-script
-PerlHandler Apache::admbookmarks
-ErrorDocument 403 /adm/login
-ErrorDocument 500 /adm/errorhandler
-
-
AuthType LONCAPA
Require valid-user
@@ -632,6 +770,17 @@ ErrorDocument 406 /adm/roles
ErrorDocument 500 /adm/errorhandler
+
+AuthType LONCAPA
+Require valid-user
+PerlAuthzHandler Apache::lonacc
+SetHandler perl-script
+PerlHandler Apache::courseprefs
+ErrorDocument 403 /adm/login
+ErrorDocument 406 /adm/roles
+ErrorDocument 500 /adm/errorhandler
+
+
AuthType LONCAPA
Require valid-user
@@ -665,6 +814,17 @@ ErrorDocument 406 /adm/roles
ErrorDocument 500 /adm/errorhandler
+
+AuthType LONCAPA
+Require valid-user
+PerlAuthzHandler Apache::lonacc
+SetHandler perl-script
+PerlHandler Apache::lonrequestcourse
+ErrorDocument 403 /adm/login
+ErrorDocument 406 /adm/roles
+ErrorDocument 500 /adm/errorhandler
+
+
AuthType LONCAPA
Require valid-user
@@ -687,6 +847,26 @@ ErrorDocument 406 /adm/roles
ErrorDocument 500 /adm/errorhandler
+
+AuthType LONCAPA
+Require valid-user
+PerlAuthzHandler Apache::lonacc
+SetHandler perl-script
+PerlHandler Apache::domainprefs
+ErrorDocument 403 /adm/login
+ErrorDocument 406 /adm/roles
+ErrorDocument 500 /adm/errorhandler
+
+
+
+PerlAccessHandler Apache::lonstatusacc
+SetHandler perl-script
+PerlHandler Apache::domainstatus
+ErrorDocument 403 /adm/login
+ErrorDocument 406 /adm/roles
+ErrorDocument 500 /adm/errorhandler
+
+
AuthType LONCAPA
Require valid-user
@@ -710,7 +890,7 @@ ErrorDocument 406 /adm/unauthorized
ErrorDocument 500 /adm/errorhandler
-
+
AuthType LONCAPA
Require valid-user
PerlAuthzHandler Apache::loncacc
@@ -722,18 +902,6 @@ ErrorDocument 406 /adm/unauthorized
ErrorDocument 500 /adm/errorhandler
-
-AuthType LONCAPA
-Require valid-user
-PerlAuthzHandler Apache::lonacc
-SetHandler perl-script
-PerlHandler Apache::lonpubdir
-ErrorDocument 403 /adm/login
-ErrorDocument 404 /adm/notfound.html
-ErrorDocument 406 /adm/unauthorized
-ErrorDocument 500 /adm/errorhandler
-
-
AuthType LONCAPA
Require valid-user
@@ -986,6 +1154,18 @@ ErrorDocument 403 /adm/login
ErrorDocument 500 /adm/errorhandler
+
+AuthType LONCAPA
+Require valid-user
+PerlAuthzHandler Apache::lonacc
+SetHandler perl-script
+PerlHandler Apache::londocs
+PerlCleanupHandler Apache::londocs::untiehash
+PerlCleanupHandler Apache::lonacc::cleanup
+ErrorDocument 403 /adm/login
+ErrorDocument 500 /adm/errorhandler
+
+
AuthType LONCAPA
Require valid-user
@@ -1083,7 +1263,7 @@ AuthType LONCAPA
Require valid-user
PerlAuthzHandler Apache::lonacc
SetHandler perl-script
-PerlHandler Apache::lonnavmaps
+PerlHandler Apache::lonnavdisplay
ErrorDocument 403 /adm/login
ErrorDocument 406 /adm/roles
ErrorDocument 500 /adm/errorhandler
@@ -1112,6 +1292,37 @@ ErrorDocument 403 /adm/login
ErrorDocument 500 /adm/errorhandler
+
+AuthType LONCAPA
+Require valid-user
+PerlAuthzHandler Apache::lonacc
+SetHandler perl-script
+PerlHandler Apache::lonwishlistdisplay
+ErrorDocument 403 /adm/login
+ErrorDocument 406 /adm/roles
+ErrorDocument 500 /adm/errorhandler
+
+
+
+AuthType LONCAPA
+Require valid-user
+PerlAuthzHandler Apache::lonacc
+SetHandler perl-script
+PerlHandler Apache::lonblockingmenu
+ErrorDocument 403 /adm/login
+ErrorDocument 406 /adm/roles
+ErrorDocument 500 /adm/errorhandler
+
+
+
+PerlAccessHandler Apache::publiccheck
+AuthType LONCAPA
+Require valid-user
+PerlAuthzHandler Apache::lonacc
+SetHandler perl-script
+PerlHandler Apache::lonblockingstatus
+
+
SetHandler perl-script
PerlHandler Apache::lonerrorhandler
@@ -1157,71 +1368,41 @@ PerlHandler Apache::loncss
ErrorDocument 500 /adm/errorhandler
-# ------------------------------------------------- Backdoor Adm Tests/Programs
-
-
-AuthName "LON-CAPA Network Administration"
-AuthType Basic
-AuthUserFile /home/httpd/lonTabs/htpasswd
-require user lonadm
-
-
-
-AuthName "LON-CAPA Network Administration"
-AuthType Basic
-AuthUserFile /home/httpd/lonTabs/htpasswd
-require user lonadm
-
-
-
-AuthName "LON-CAPA Network Administration"
-AuthType Basic
-AuthUserFile /home/httpd/lonTabs/htpasswd
-require user lonadm
-
+
+SetHandler perl-script
+PerlHandler Apache::coursecatalog
+ErrorDocument 500 /adm/errorhandler
+
-
-AuthName "LON-CAPA Network Administration"
-AuthType Basic
-AuthUserFile /home/httpd/lonTabs/htpasswd
-require user lonadm
-
+
+SetHandler perl-script
+PerlHandler Apache::resetpw
+ErrorDocument 500 /adm/errorhandler
+
-
-AuthName "LON-CAPA Network Administration"
-AuthType Basic
-AuthUserFile /home/httpd/lonTabs/htpasswd
-require user lonadm
-
+
+SetHandler perl-script
+PerlHandler Apache::selfenroll
+ErrorDocument 500 /adm/errorhandler
+
-
-AuthName "harvest"
-AuthType Basic
-AuthUserFile /home/httpd/lonTabs/htpasswd
-require user reaper
-
+
+SetHandler perl-script
+PerlHandler Apache::createaccount
+ErrorDocument 500 /adm/errorhandler
+
-
-AuthName "Offline"
-AuthType Basic
-AuthUserFile /home/httpd/lonTabs/htpasswd
-require user offline
-
+
+SetHandler perl-script
+PerlHandler Apache::londns
+ErrorDocument 500 /adm/errorhandler
+
-
-AuthName "Offline"
-AuthType Basic
-AuthUserFile /home/httpd/lonTabs/htpasswd
-require user offline
-
+# ------------------------------------------------- Backdoor Adm Tests/Programs
-AuthName "LON-CAPA Network Administration"
-AuthType Basic
-AuthUserFile /home/httpd/lonTabs/htpasswd
-require user lonadm
+PerlAccessHandler Apache::lonstatusacc
SetHandler perl-script
-PerlAuthzHandler Apache::lonacc
PerlHandler Apache::lontest
@@ -1239,6 +1420,26 @@ PerlChildExitHandler Apache::lonacc::goo
Options None
AllowOverride None
+order deny,allow
+deny from all
+
+
+# Allow uploaded files to be served
+
+
+Options Includes FollowSymLinks
+AllowOverride None
+order allow,deny
+allow from all
+
+
+# Allow construction space files to be served
+
+
+Options Includes FollowSymLinks
+AllowOverride
+order allow,deny
+allow from all
# Yes to symbolic links and server-side includes
@@ -1254,27 +1455,52 @@ allow from all
AllowOverride None
-Options ExecCGI
+Options ExecCGI FollowSymLinks
+order allow,deny
+allow from all
+
+
+# Allow serving of files in prtspool
+
+
+Options Includes FollowSymLinks
+AllowOverride None
+order allow,deny
+allow from all
+
+
+# Allow serving of files in zipspool
+
+
+Options Includes FollowSymLinks
+AllowOverride None
+order allow,deny
+allow from all
+
+
+# Allow serving of files in captchaspool
+
+
+Options Includes FollowSymLinks
+AllowOverride None
+order allow,deny
+allow from all
# ============================================================= Access Handlers
# ------------------------------------------------- Allow server-status reports
+PerlAccessHandler Apache::lonstatusacc
SetHandler server-status
-AuthName "LON-CAPA Network Administration"
-AuthType Basic
-AuthUserFile /home/httpd/lonTabs/htpasswd
-require user lonadm
# ------------------------ Allow LON-CAPA "low-level" connection status reports
-
-AuthName "LON-CAPA Network Administration"
-AuthType Basic
-AuthUserFile /home/httpd/lonTabs/htpasswd
-require user lonadm
-
+
+PerlAccessHandler Apache::lonstatusacc
+ErrorDocument 406 /adm/roles
+ErrorDocument 500 /adm/errorhandler
+
# ------------------- Allow access to local system documentation from localhost
Alias /doc /usr/doc
@@ -1290,17 +1516,24 @@ Options Indexes FollowSymLinks
PerlSetVar lonVersion ''
PerlSetVar lonIDsDir /home/httpd/lonIDs
+PerlSetVar lonDAVsessDir /home/httpd/webdav/sessionIDs
PerlSetVar lonTabDir /home/httpd/lonTabs
PerlSetVar lonUsersDir /home/httpd/lonUsers
PerlSetVar lonIconsURL /adm/lonIcons
PerlSetVar londPort 5663
PerlSetVar lonSysEMail korte@lite.msu.edu
PerlSetVar lonDaemons /home/httpd/perl
+PerlSetVar lonLib /home/httpd/lib
PerlSetVar lonSockDir /home/httpd/sockets
+PerlSetVar lonSockCreate /home/httpd/sockets/common
PerlSetVar lonDocRoot /home/httpd/html
PerlSetVar lonPrtDir /home/httpd/prtspool
PerlSetVar lonIncludes /home/httpd/html/res/adm/includes
-# & sepeareted list of : seperated fileds inorder of
+PerlSetVar lonZipDir /home/httpd/zipspool
+PerlSetVar lonCaptchaDir /home/httpd/captchaspool
+PerlSetVar lonCaptchaDb /home/httpd/captchadb
+PerlSetVar lonFontsDir /home/httpd/html/adm/fonts
+# & separated list of : separated fields in order of
# - internal name to call it,
# - regexp that it should match (done case-insensitively)
# - regexp that is should not match (done case-insensitively)
@@ -1308,7 +1541,7 @@ PerlSetVar lonIncludes /home/http
# - a number that describes the minimum version that has mathml support
# - a number that describes the minimum number version that has unicode support
-PerlSetVar lonBrowsDet explorer:msie:netscape:msie\s(\d+\.\d+)\;:9999:9999&mozilla:mozilla\/[5-9]:msie:mozilla\/(\d+\.\d+)\s:9999:1&netscape:netscape:msie:netscape\/(\d+\.\d+):9999:7&netscape:netscape\/[7-9]:shouldnotmatch:netscape\/(\d+\.\d+):9999:7&amaya:amaya:mozilla:V(\d+\.\d+)\s:1:1&safari:safari:msie:safari\/([\d\.]+):9999:84
+PerlSetVar lonBrowsDet explorer:msie:netscape:msie\s(\d+\.\d+)\;:9999:5&mozilla:mozilla\/[5-9]:msie:mozilla\/(\d+\.\d+)\s:9999:1&netscape:netscape:msie:netscape\/(\d+\.\d+):9999:7&netscape:netscape\/[7-9]:shouldnotmatch:netscape\/(\d+\.\d+):9999:7&amaya:amaya:mozilla:V(\d+\.\d+)\s:1:1&safari:safari:msie:safari\/([\d\.]+):9999:84
PerlSetVar lonTextBrowsers windows\s+ce:lynx
PerlSetVar lonScansDir /home/httpd/scantron
@@ -1324,12 +1557,6 @@ PerlSetVar FAQHost http://help.lon-capa
PerlSetVar lonSqlAccess localhostkey
-# -----------------------------------------------------------------------------
-# lonttpdPort is the port used by the lightweight graphics httpd server
-# not the main Apache server
-PerlSetVar lonhttpdPort 8080
-
-
#----------------------------------------------------------------------------
#
# Parameters used by secure lond/lonc
@@ -1400,6 +1627,9 @@ PerlSetVar SSLEmail certificate@lon-
#-------------------------------------------------------------------------
+# ====================================== Include support for SSL rewrites
+
+Include conf/loncapa_rewrite.conf
# ====================================== Include machine-specific configuration