--- loncom/loncapa_apache.conf 2023/07/07 10:37:03 1.215.2.30.2.4 +++ loncom/loncapa_apache.conf 2012/12/14 23:03:17 1.220 @@ -1,8 +1,8 @@ ## ## loncapa_apache.conf -- Apache HTTP LON-CAPA configuration file ## - -# $Id: loncapa_apache.conf,v 1.215.2.30.2.4 2023/07/07 10:37:03 raeburn Exp $ +## $Id: loncapa_apache.conf,v 1.220 2012/12/14 23:03:17 raeburn Exp $ +## # # LON-CAPA Section (extensions to httpd.conf daemon configuration) @@ -18,9 +18,7 @@ Group www # ======================================================= Shared Object Modules - - LoadModule perl_module modules/libperl.so - +LoadModule perl_module modules/libperl.so AddModule mod_perl.c @@ -30,7 +28,7 @@ PerlSetVar MODPERL2 1 # =============================================================== Miscellaneous -ServerAdmin consortium@loncapa.org +ServerAdmin korte@lite.msu.edu ExtendedStatus On # # LON-CAPA Section (extensions to srm.conf name space servicing) @@ -64,11 +62,11 @@ PerlSetVar lonOtherAuthen no #PerlWarn On -PerlAuthzHandler 'sub { return OK }' +PerlAuthenHandler 'sub { return OK }' # Send proper expires header to avoid unnecessary HTTP request for static content - + ExpiresActive On ExpiresDefault "access plus 12 hours" Header set Cache-Control "public, no-transform" @@ -131,7 +129,6 @@ ErrorDocument 500 /adm/errorhandler -Options +FollowSymLinks -Includes PerlAccessHandler Apache::lontokacc PerlCleanupHandler Apache::lontokacc::removefile PerlCleanupHandler Apache::lonacc::cleanup @@ -150,10 +147,6 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler - - Options +FollowSymLinks -Includes - - AuthType LONCAPA Require valid-user @@ -275,32 +268,6 @@ ErrorDocument 406 /adm/notinit.html ErrorDocument 500 /adm/errorhandler - -AuthType LONCAPA -Require valid-user -PerlAuthzHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonslotcheck -PerlHandler Apache::londatecheck -PerlHandler Apache::lonipcheck -PerlHandler Apache::lonexttool -ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/notinit.html -ErrorDocument 500 /adm/errorhandler - - - -AuthType LONCAPA -Require valid-user -PerlAuthzHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonexturlcheck -ErrorDocument 403 /adm/login -ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized -ErrorDocument 500 /adm/errorhandler - - AuthType LONCAPA Require valid-user @@ -312,7 +279,7 @@ ErrorDocument 406 /adm/unauthorized ErrorDocument 500 /adm/errorhandler - + AuthType Basic @@ -447,8 +414,8 @@ ErrorDocument 413 /adm/overloaded.tx AuthType LONCAPA Require valid-user -PerlAuthzHandler Apache::lonacc SetHandler perl-script +PerlAuthzHandler Apache::lonacc PerlHandler Apache::lonmeta @@ -542,6 +509,16 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonindexcourse +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user @@ -585,12 +562,12 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler - + AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script -PerlHandler Apache::lonremote +PerlHandler Apache::lonpickresource ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler @@ -662,42 +639,12 @@ SetHandler perl-script PerlHandler Apache::lonlogin - -SetHandler perl-script -PerlHandler Apache::ltiauth - - - -SetHandler perl-script -PerlHandler Apache::lonrelaunch - - - -SetHandler perl-script -PerlHandler Apache::ltiauth - - - -SetHandler perl-script -PerlHandler Apache::ltipassback - - - -SetHandler perl-script -PerlHandler Apache::ltiroster - - - -SetHandler perl-script -PerlHandler Apache::ltilogout - - PerlAccessHandler Apache::publiccheck AuthType LONCAPA Require valid-user -PerlAuthzHandler Apache::lonacc SetHandler perl-script +PerlAuthzHandler Apache::lonacc PerlHandler Apache::restrictedaccess ErrorDocument 500 /adm/errorhandler @@ -706,20 +653,9 @@ ErrorDocument 500 /adm/errorhandler PerlAccessHandler Apache::publiccheck AuthType LONCAPA Require valid-user -PerlAuthzHandler Apache::lonacc SetHandler perl-script -PerlHandler Apache::blockedaccess -ErrorDocument 500 /adm/errorhandler - - - -PerlAccessHandler Apache::publiccheck -AuthType LONCAPA -Require valid-user PerlAuthzHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonprotected -ErrorDocument 403 /adm/login +PerlHandler Apache::blockedaccess ErrorDocument 500 /adm/errorhandler @@ -755,7 +691,6 @@ PerlHandler Apache::migrateuser - Header set Cache-Control "private,no-store,no-cache,max-age=0" AuthType shibboleth ShibUseEnvironment On @@ -764,25 +699,12 @@ PerlHandler Apache::migrateuser require valid-user PerlAuthzHandler Apache::lonshibacc PerlAuthzHandler Apache::lonacc - ErrorDocument 403 /adm/login - ErrorDocument 500 /adm/errorhandler PerlTypeHandler Apache::lonnoshib - -AuthType LONCAPA -Require valid-user -PerlAuthzHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonlinkexit -ErrorDocument 403 /adm/login -ErrorDocument 409 /adm/preferences?action=lockwarning -ErrorDocument 500 /adm/errorhandler - - AuthType LONCAPA Require valid-user @@ -793,16 +715,6 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler - -AuthType LONCAPA -Require valid-user -PerlAuthzHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::admannotations -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - AuthType LONCAPA Require valid-user @@ -1275,16 +1187,6 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler - -AuthType LONCAPA -Require valid-user -PerlAuthzHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonextresedit -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - AuthType LONCAPA Require valid-user @@ -1398,7 +1300,6 @@ PerlHandler Apache::groupsort PerlCleanupHandler Apache::groupsort::cleanup PerlCleanupHandler Apache::lonacc::cleanup ErrorDocument 403 /adm/login -ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler @@ -1410,7 +1311,7 @@ SetHandler perl-script PerlHandler Apache::lonwishlistdisplay ErrorDocument 403 /adm/login ErrorDocument 406 /adm/roles -ErrorDocument 500 /adm/errorhandler +ErrorDocument 500 /adm/errorhandler @@ -1433,17 +1334,6 @@ SetHandler perl-script PerlHandler Apache::lonblockingstatus - -AuthType LONCAPA -Require valid-user -PerlAuthzHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonaccesstimes -ErrorDocument 403 /adm/login -ErrorDocument 406 /adm/roles -ErrorDocument 500 /adm/errorhandler - - SetHandler perl-script PerlHandler Apache::lonerrorhandler @@ -1483,7 +1373,7 @@ PerlHandler Apache::lonsupportreq ErrorDocument 500 /adm/errorhandler - + SetHandler perl-script PerlHandler Apache::loncss ErrorDocument 500 /adm/errorhandler @@ -1525,16 +1415,6 @@ PerlHandler Apache::spellcheck - -AuthType LONCAPA -Require valid-user -PerlAuthzHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lontiny -ErrorDocument 403 /adm/login -ErrorDocument 406 /adm/roles -ErrorDocument 500 /adm/errorhandler - # ------------------------------------------------- Backdoor Adm Tests/Programs @@ -1558,41 +1438,35 @@ PerlChildExitHandler Apache::lonacc::goo Options None AllowOverride None - - Require all denied - - - order deny,allow - deny from all - +order deny,allow +deny from all # Allow uploaded files to be served -Options FollowSymLinks +Options Includes FollowSymLinks AllowOverride None - - Require all granted - - - order allow,deny - allow from all - +order allow,deny +allow from all +# Allow construction space files to be served + + +Options Includes FollowSymLinks +AllowOverride +order allow,deny +allow from all + + # Yes to symbolic links and server-side includes -Options FollowSymLinks +Options Includes FollowSymLinks AllowOverride None - - Require all granted - - - order allow,deny - allow from all - +order allow,deny +allow from all # If it is in cgi-bin, then it can be executed as a CGI script. @@ -1600,65 +1474,37 @@ AllowOverride None AllowOverride None Options ExecCGI FollowSymLinks - - Require all granted - - - order allow,deny - allow from all - +order allow,deny +allow from all # Allow serving of files in prtspool -Options FollowSymLinks +Options Includes FollowSymLinks AllowOverride None - - Require all granted - - - order allow,deny - allow from all - +order allow,deny +allow from all # Allow serving of files in zipspool -Options FollowSymLinks +Options Includes FollowSymLinks AllowOverride None - - Require all granted - - - order allow,deny - allow from all - +order allow,deny +allow from all # Allow serving of files in captchaspool -Options FollowSymLinks +Options Includes FollowSymLinks AllowOverride None - - Require all granted - - - order allow,deny - allow from all - +order allow,deny +allow from all - - DirectoryIndex disabled - - - - DirectoryIndex disabled - - # ============================================================= Access Handlers # ------------------------------------------------- Allow server-status reports @@ -1677,29 +1523,23 @@ ErrorDocument 500 /adm/errorhandler # ------------------- Allow access to local system documentation from localhost Alias /doc /usr/doc +order deny,allow +deny from all +allow from localhost Options Indexes FollowSymLinks - - Require local - - - order deny,allow - deny from all - allow from localhost - # ******** THESE "SHOULD" NEVER BE ALTERED BY THE USER ************************ # ====================================== Internal Settings / Perl Configuration -PerlSetVar lonVersion '' +PerlSetVar lonVersion '' PerlSetVar lonIDsDir /home/httpd/lonIDs -PerlSetVar lonBalanceDir /home/httpd/balanceIDs PerlSetVar lonDAVsessDir /home/httpd/webdav/sessionIDs PerlSetVar lonTabDir /home/httpd/lonTabs PerlSetVar lonUsersDir /home/httpd/lonUsers PerlSetVar lonIconsURL /adm/lonIcons PerlSetVar londPort 5663 -PerlSetVar lonSysEMail techsupport@loncapa.org +PerlSetVar lonSysEMail korte@lite.msu.edu PerlSetVar lonDaemons /home/httpd/perl PerlSetVar lonLib /home/httpd/lib PerlSetVar lonSockDir /home/httpd/sockets @@ -1710,10 +1550,8 @@ PerlSetVar lonIncludes /home/http PerlSetVar lonZipDir /home/httpd/zipspool PerlSetVar lonCaptchaDir /home/httpd/captchaspool PerlSetVar lonCaptchaDb /home/httpd/captchadb -PerlSetVar lonLTIDir /home/httpd/lonLTItmp -PerlSetVar ltiIDsDir /home/httpd/ltiIDs PerlSetVar lonFontsDir /home/httpd/html/adm/fonts -# & separated list of % separated fields in order of +# & separated list of : separated fields in order of # - internal name to call it, # - regexp that it should match (done case-insensitively) # - regexp that is should not match (done case-insensitively) @@ -1721,12 +1559,12 @@ PerlSetVar lonFontsDir /home/h # - a number that describes the minimum version that has mathml support # - a number that describes the minimum number version that has unicode support -PerlSetVar lonBrowsDet explorer%msie%netscape%msie\s(\d+\.\d+)\;%9999%5&mozilla%mozilla\/[5-9]%msie%mozilla\/(\d+\.\d+)\s%9999%1&netscape%netscape%msie%netscape\/(\d+\.\d+)%9999%7&netscape%netscape\/[7-9]%shouldnotmatch%netscape\/(\d+\.\d+)%9999%7&amaya%amaya%mozilla%V(\d+\.\d+)\s%1%1&safari%safari%msie%safari\/([\d\.]+)%9999%84&chrome%chrome%chromeframe%\s+chrome\/(\d+\.\d+)%9999%1&explorer%\s+rv\:\d+\.\d+%firefox%\s+rv\:(\d+\.\d+)%9999%5&opera%\sOPR\/\d+\.\d+%shouldnotmatch%\sOPR\/(\d+\.\d+)%9999%6&opera%^Opera\/9.80\s.+Version\/\d+\.\d+$%shouldnotmatch%Version\/(\d+\.\d+)$%9999%6&opera%^Opera\/\d+\.\d+\s%Version\/\d+\.\d+$%^Opera\/(\d+\.\d+)\s%9999%6 +PerlSetVar lonBrowsDet explorer:msie:netscape:msie\s(\d+\.\d+)\;:9999:5&mozilla:mozilla\/[5-9]:msie:mozilla\/(\d+\.\d+)\s:9999:1&netscape:netscape:msie:netscape\/(\d+\.\d+):9999:7&netscape:netscape\/[7-9]:shouldnotmatch:netscape\/(\d+\.\d+):9999:7&amaya:amaya:mozilla:V(\d+\.\d+)\s:1:1&safari:safari:msie:safari\/([\d\.]+):9999:84&chrome:chrome:shouldnotmatch:chrome\/(\d+\.\d+):9999:1 PerlSetVar lonTextBrowsers windows\s+ce:lynx PerlSetVar lonScansDir /home/httpd/scantron PerlSetVar lonScriptTimeout 10 -PerlSetVar BugzillaHost https://bugs.loncapa.org/ +PerlSetVar BugzillaHost http://bugs.lon-capa.org/ PerlSetVar FAQHost http://help.lon-capa.org/ # ----------------------------------------------------------------------------- # NOTE: lonSqlAccess key is the password for the MySQL user