--- loncom/loncapa_apache.conf 2016/11/30 02:32:47 1.215.2.19 +++ loncom/loncapa_apache.conf 2022/06/30 21:04:15 1.278 @@ -2,7 +2,7 @@ ## loncapa_apache.conf -- Apache HTTP LON-CAPA configuration file ## -# $Id: loncapa_apache.conf,v 1.215.2.19 2016/11/30 02:32:47 raeburn Exp $ +# $Id: loncapa_apache.conf,v 1.278 2022/06/30 21:04:15 raeburn Exp $ # # LON-CAPA Section (extensions to httpd.conf daemon configuration) @@ -68,7 +68,7 @@ PerlAuthzHandler 'sub { return OK }' # Send proper expires header to avoid unnecessary HTTP request for static content - + ExpiresActive On ExpiresDefault "access plus 12 hours" Header set Cache-Control "public, no-transform" @@ -131,6 +131,7 @@ ErrorDocument 500 /adm/errorhandler +Options +FollowSymLinks -Includes PerlAccessHandler Apache::lontokacc PerlCleanupHandler Apache::lontokacc::removefile PerlCleanupHandler Apache::lonacc::cleanup @@ -149,6 +150,10 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + + Options +FollowSymLinks -Includes + + AuthType LONCAPA Require valid-user @@ -270,6 +275,42 @@ ErrorDocument 406 /adm/notinit.html ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck +PerlHandler Apache::lonexttool +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/notinit.html +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonplacementtest +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/notinit.html +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonexturlcheck +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/unauthorized +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user @@ -445,6 +486,94 @@ SetHandler perl-script PerlHandler Apache::lonxml + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::loncacc +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/unauthorized +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/unauthorized +ErrorDocument 500 /adm/errorhandler + + + +SetHandler perl-script +PerlHandler Apache::daxepage + + + +SetHandler perl-script +PerlHandler Apache::daxepage + + + +SetHandler perl-script +PerlHandler Apache::daxeopen + + + +SetHandler perl-script +PerlHandler Apache::daxeopen + + + +SetHandler perl-script +PerlHandler Apache::daxeopen + + + +SetHandler perl-script +PerlHandler Apache::daxeopen + + + + + RewriteEngine on + RewriteRule /daxeopen/(.*) /$1 + + + + + + RewriteEngine on + RewriteRule /daxeopen/(.*) /$1 + + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::daxesave + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::loncoursepub +ErrorDocument 404 /adm/notfound.html +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user @@ -511,6 +640,16 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonindexcourse +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user @@ -554,12 +693,12 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler - + AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script -PerlHandler Apache::lonremote +PerlHandler Apache::lonpickresource ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler @@ -631,6 +770,36 @@ SetHandler perl-script PerlHandler Apache::lonlogin + +SetHandler perl-script +PerlHandler Apache::ltiauth + + + +SetHandler perl-script +PerlHandler Apache::lonrelaunch + + + +SetHandler perl-script +PerlHandler Apache::ltiauth + + + +SetHandler perl-script +PerlHandler Apache::ltipassback + + + +SetHandler perl-script +PerlHandler Apache::ltiroster + + + +SetHandler perl-script +PerlHandler Apache::ltilogout + + PerlAccessHandler Apache::publiccheck AuthType LONCAPA @@ -651,6 +820,17 @@ PerlHandler Apache::blockedaccess ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonprotected +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user @@ -683,6 +863,7 @@ PerlHandler Apache::migrateuser + Header set Cache-Control "private,no-store,no-cache,max-age=0" AuthType shibboleth ShibUseEnvironment On @@ -691,12 +872,25 @@ PerlHandler Apache::migrateuser require valid-user PerlAuthzHandler Apache::lonshibacc PerlAuthzHandler Apache::lonacc + ErrorDocument 403 /adm/login + ErrorDocument 500 /adm/errorhandler PerlTypeHandler Apache::lonnoshib + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonlinkexit +ErrorDocument 403 /adm/login +ErrorDocument 409 /adm/preferences?action=lockwarning +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user @@ -707,6 +901,16 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::admannotations +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user @@ -1314,7 +1518,7 @@ SetHandler perl-script PerlHandler Apache::lonwishlistdisplay ErrorDocument 403 /adm/login ErrorDocument 406 /adm/roles -ErrorDocument 500 /adm/errorhandler +ErrorDocument 500 /adm/errorhandler @@ -1428,7 +1632,16 @@ SetHandler perl-script PerlHandler Apache::spellcheck - + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lontiny +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + # ------------------------------------------------- Backdoor Adm Tests/Programs @@ -1464,7 +1677,7 @@ AllowOverride None # Allow uploaded files to be served -Options Includes FollowSymLinks +Options FollowSymLinks AllowOverride None Require all granted @@ -1475,24 +1688,10 @@ AllowOverride None -# Allow construction space files to be served - - -Options Includes FollowSymLinks -AllowOverride - - Require all granted - - - order allow,deny - allow from all - - - # Yes to symbolic links and server-side includes -Options Includes FollowSymLinks +Options FollowSymLinks AllowOverride None Require all granted @@ -1520,7 +1719,7 @@ Options ExecCGI FollowSymLinks # Allow serving of files in prtspool -Options Includes FollowSymLinks +Options FollowSymLinks AllowOverride None Require all granted @@ -1534,7 +1733,7 @@ AllowOverride None # Allow serving of files in zipspool -Options Includes FollowSymLinks +Options FollowSymLinks AllowOverride None Require all granted @@ -1548,7 +1747,7 @@ AllowOverride None # Allow serving of files in captchaspool -Options Includes FollowSymLinks +Options FollowSymLinks AllowOverride None Require all granted @@ -1599,8 +1798,9 @@ Options Indexes FollowSymLinks # ******** THESE "SHOULD" NEVER BE ALTERED BY THE USER ************************ # ====================================== Internal Settings / Perl Configuration -PerlSetVar lonVersion '' +PerlSetVar lonVersion '' PerlSetVar lonIDsDir /home/httpd/lonIDs +PerlSetVar lonBalanceDir /home/httpd/balanceIDs PerlSetVar lonDAVsessDir /home/httpd/webdav/sessionIDs PerlSetVar lonTabDir /home/httpd/lonTabs PerlSetVar lonUsersDir /home/httpd/lonUsers @@ -1617,6 +1817,8 @@ PerlSetVar lonIncludes /home/http PerlSetVar lonZipDir /home/httpd/zipspool PerlSetVar lonCaptchaDir /home/httpd/captchaspool PerlSetVar lonCaptchaDb /home/httpd/captchadb +PerlSetVar lonLTIDir /home/httpd/lonLTItmp +PerlSetVar ltiIDsDir /home/httpd/ltiIDs PerlSetVar lonFontsDir /home/httpd/html/adm/fonts # & separated list of % separated fields in order of # - internal name to call it, @@ -1631,7 +1833,7 @@ PerlSetVar lonBrowsDet explorer%m PerlSetVar lonTextBrowsers windows\s+ce:lynx PerlSetVar lonScansDir /home/httpd/scantron PerlSetVar lonScriptTimeout 10 -PerlSetVar BugzillaHost http://bugs.lon-capa.org/ +PerlSetVar BugzillaHost https://bugs.loncapa.org/ PerlSetVar FAQHost http://help.lon-capa.org/ # ----------------------------------------------------------------------------- # NOTE: lonSqlAccess key is the password for the MySQL user @@ -1671,6 +1873,8 @@ PerlSetVar lonCertificateDirectory /home PerlSetVar lonnetCertificateAuthority loncapaCA.pem PerlSetVar lonnetCertificate lonhostcert.pem +PerlSetVar lonnetHostnameCertificate lonhostnamecert.pem +PerlSetVar lonnetCertRevocationList loncapaCAcrl.pem # # To generate the request for a certificate, and to negotiate the