--- loncom/loncapa_apache.conf 2007/03/28 00:12:48 1.165 +++ loncom/loncapa_apache.conf 2012/09/10 10:23:01 1.218 @@ -1,7 +1,7 @@ ## ## loncapa_apache.conf -- Apache HTTP LON-CAPA configuration file ## -## $Id: loncapa_apache.conf,v 1.165 2007/03/28 00:12:48 albertel Exp $ +## $Id: loncapa_apache.conf,v 1.218 2012/09/10 10:23:01 foxr Exp $ ## # @@ -35,8 +35,14 @@ ExtendedStatus On # # ===================================================================== Aliases +Alias /zipspool/ /home/httpd/zipspool/ Alias /prtspool/ /home/httpd/prtspool/ +Alias /captchaspool/ /home/httpd/captchaspool/ +Alias /webdav/ /home/httpd/html/priv/ ScriptAlias /cgi-bin/ "/home/httpd/cgi-bin/" + + DAVLockDB /home/httpd/webdav/DAVLock + # ================================================================= Directories @@ -48,7 +54,24 @@ PerlCleanupHandler Apache::lonacc::clean PerlAuthenHandler Apache::checkauthen PerlSetVar lonOtherAuthen no + + PerlAuthenHandler Apache::lonshibauth + PerlSetVar lonOtherAuthen yes + PerlSetVar lonOtherAuthenType Shibboleth + + #PerlWarn On + +PerlAuthenHandler 'sub { return OK }' + + +# Send proper expires header to avoid unnecessary HTTP request for static content + + ExpiresActive On + ExpiresDefault "access plus 12 hours" + Header set Cache-Control "public, no-transform" + + AuthType LONCAPA @@ -93,6 +116,18 @@ SetHandler perl-script PerlHandler Apache::portfolio + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpdfupload +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lontokacc PerlCleanupHandler Apache::lontokacc::removefile @@ -103,6 +138,8 @@ PerlCleanupHandler Apache::lonacc::clean AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc +PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck PerlHeaderParserHandler Apache::lonuploadrep ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html @@ -199,6 +236,8 @@ AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script +PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck PerlHandler Apache::lonsimplepage ErrorDocument 404 /adm/notfound.html ErrorDocument 406 /adm/notinit.html @@ -211,6 +250,7 @@ Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck PerlHandler Apache::lonbulletin ErrorDocument 404 /adm/notfound.html ErrorDocument 406 /adm/notinit.html @@ -228,30 +268,51 @@ ErrorDocument 406 /adm/notinit.html ErrorDocument 500 /adm/errorhandler - + AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::loncacc SetHandler perl-script -PerlHandler Apache::lonconstruct ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html ErrorDocument 406 /adm/unauthorized ErrorDocument 500 /adm/errorhandler - -PerlAccessHandler Apache::lonracc + + + + AuthType Basic + AuthName "LONCAPA username,domain" + Require valid-user + SSLRequireSSL + PerlAuthenHandler Apache::lonwebdavauth + PerlAuthzHandler Apache::lonwebdavacc + Dav On + DirectoryIndex index.missing + Options Indexes FollowSymLinks + ErrorDocument 403 /adm/nowebdav.html + ErrorDocument 404 /adm/notfound.html + ErrorDocument 406 /adm/unauthorized + ErrorDocument 500 /adm/errorhandler + + + + RewriteEngine on + RewriteRule .* http://%{HTTP_HOST}/adm/nowebdav.html [L] + + + + + + RewriteEngine on + RewriteRule .* http://%{HTTP_HOST}/adm/nowebdav.html [L] + + - -AuthType LONCAPA -Require valid-user -PerlAuthzHandler Apache::loncacc -ErrorDocument 403 /adm/login -ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized -ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonracc @@ -276,24 +337,35 @@ ErrorDocument 406 /adm/roles ErrorDocument 413 /adm/overloaded.txt ErrorDocument 500 /adm/errorhandler + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/roles +ErrorDocument 413 /adm/overloaded.txt +ErrorDocument 500 /adm/errorhandler + # ------------------------------------------------------------------------- RAT - + SetHandler perl-script PerlHandler Apache::lonratedt - + SetHandler perl-script PerlHandler Apache::lonratedt - + SetHandler perl-script PerlHandler Apache::lonratsrv - + SetHandler perl-script PerlHandler Apache::lonratmenu @@ -317,7 +389,7 @@ PerlCleanupHandler Apache::lonindexer::c PerlCleanupHandler Apache::lonacc::cleanup - + SetHandler perl-script PerlHandler Apache::lontex @@ -332,7 +404,7 @@ SetHandler perl-script PerlHandler Apache::lonsequence - + PerlAccessHandler Apache::publiccheck SetHandler perl-script PerlHandler Apache::lonmeta @@ -349,26 +421,34 @@ PerlHandler Apache::lonmeta - + SetHandler perl-script PerlHandler Apache::lonrights - + SetHandler perl-script PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck PerlHandler Apache::lonxml - + SetHandler perl-script PerlHandler Apache::lonhomework + +SetHandler perl-script +PerlHandler Apache::lonxml + + AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc +PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck SetHandler perl-script PerlHandler Apache::lonwrapper ErrorDocument 403 /adm/login @@ -419,6 +499,26 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonsearchcourse +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonindexcourse +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user @@ -448,6 +548,7 @@ PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonroles ErrorDocument 403 /adm/login +ErrorDocument 409 /adm/preferences?action=lockwarning ErrorDocument 500 /adm/errorhandler @@ -461,14 +562,24 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler - + AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script -PerlHandler Apache::lonremote +PerlHandler Apache::lonpickresource ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpickauthor +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler @@ -481,6 +592,17 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpickuser +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user @@ -501,6 +623,17 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::londependencies +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + SetHandler perl-script PerlHandler Apache::lonlogin @@ -533,6 +666,7 @@ PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonlogout ErrorDocument 403 /adm/login +ErrorDocument 409 /adm/preferences?action=lockwarning ErrorDocument 500 /adm/errorhandler @@ -556,6 +690,21 @@ SetHandler perl-script PerlHandler Apache::migrateuser + + + AuthType shibboleth + ShibUseEnvironment On + ShibRequestSetting requireSession 1 + ShibRequestSetting redirectToSSL 443 + require valid-user + PerlAuthzHandler Apache::lonshibacc + PerlAuthzHandler Apache::lonacc + + + PerlTypeHandler Apache::lonnoshib + + + AuthType LONCAPA Require valid-user @@ -576,16 +725,6 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler - -AuthType LONCAPA -Require valid-user -PerlAuthzHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::admbookmarks -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - AuthType LONCAPA Require valid-user @@ -642,6 +781,17 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::courseprefs +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user @@ -675,6 +825,17 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonrequestcourse +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user @@ -708,6 +869,15 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonstatusacc +SetHandler perl-script +PerlHandler Apache::domainstatus +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user @@ -731,7 +901,7 @@ ErrorDocument 406 /adm/unauthorized ErrorDocument 500 /adm/errorhandler - + AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::loncacc @@ -743,18 +913,6 @@ ErrorDocument 406 /adm/unauthorized ErrorDocument 500 /adm/errorhandler - -AuthType LONCAPA -Require valid-user -PerlAuthzHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonpubdir -ErrorDocument 403 /adm/login -ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized -ErrorDocument 500 /adm/errorhandler - - AuthType LONCAPA Require valid-user @@ -1007,6 +1165,18 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::londocs +PerlCleanupHandler Apache::londocs::untiehash +PerlCleanupHandler Apache::lonacc::cleanup +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user @@ -1133,6 +1303,37 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonwishlistdisplay +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonblockingmenu +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonblockingstatus + + SetHandler perl-script PerlHandler Apache::lonerrorhandler @@ -1190,77 +1391,38 @@ PerlHandler Apache::resetpw ErrorDocument 500 /adm/errorhandler - + SetHandler perl-script -PerlHandler Apache::londns +PerlHandler Apache::selfenroll ErrorDocument 500 /adm/errorhandler -# ------------------------------------------------- Backdoor Adm Tests/Programs - - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - - - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - + +SetHandler perl-script +PerlHandler Apache::createaccount +ErrorDocument 500 /adm/errorhandler + - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - + +SetHandler perl-script +PerlHandler Apache::londns +ErrorDocument 500 /adm/errorhandler + - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - +# Spellcheck helper ajax for jquery-spellcheck - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - + +SetHandler perl-script +PerlHandler APache::spellcheck + - -AuthName "harvest" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user reaper - - -AuthName "Offline" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user offline - - -AuthName "Offline" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user offline - +# ------------------------------------------------- Backdoor Adm Tests/Programs -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm +PerlAccessHandler Apache::lonstatusacc SetHandler perl-script -PerlAuthzHandler Apache::lonacc PerlHandler Apache::lontest @@ -1327,24 +1489,38 @@ order allow,deny allow from all +# Allow serving of files in zipspool + + +Options Includes FollowSymLinks +AllowOverride None +order allow,deny +allow from all + + +# Allow serving of files in captchaspool + + +Options Includes FollowSymLinks +AllowOverride None +order allow,deny +allow from all + + # ============================================================= Access Handlers # ------------------------------------------------- Allow server-status reports +PerlAccessHandler Apache::lonstatusacc SetHandler server-status -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm # ------------------------ Allow LON-CAPA "low-level" connection status reports - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - + +PerlAccessHandler Apache::lonstatusacc +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + # ------------------- Allow access to local system documentation from localhost Alias /doc /usr/doc @@ -1358,20 +1534,26 @@ Options Indexes FollowSymLinks # ******** THESE "SHOULD" NEVER BE ALTERED BY THE USER ************************ # ====================================== Internal Settings / Perl Configuration -PerlSetVar lonVersion '' +PerlSetVar lonVersion '2.11.CVS_HEAD-2012091006' PerlSetVar lonIDsDir /home/httpd/lonIDs +PerlSetVar lonDAVsessDir /home/httpd/webdav/sessionIDs PerlSetVar lonTabDir /home/httpd/lonTabs PerlSetVar lonUsersDir /home/httpd/lonUsers PerlSetVar lonIconsURL /adm/lonIcons PerlSetVar londPort 5663 PerlSetVar lonSysEMail korte@lite.msu.edu PerlSetVar lonDaemons /home/httpd/perl +PerlSetVar lonLib /home/httpd/lib PerlSetVar lonSockDir /home/httpd/sockets PerlSetVar lonSockCreate /home/httpd/sockets/common PerlSetVar lonDocRoot /home/httpd/html PerlSetVar lonPrtDir /home/httpd/prtspool PerlSetVar lonIncludes /home/httpd/html/res/adm/includes -# & sepeareted list of : seperated fileds inorder of +PerlSetVar lonZipDir /home/httpd/zipspool +PerlSetVar lonCaptchaDir /home/httpd/captchaspool +PerlSetVar lonCaptchaDb /home/httpd/captchadb +PerlSetVar lonFontsDir /home/httpd/html/adm/fonts +# & separated list of : separated fields in order of # - internal name to call it, # - regexp that it should match (done case-insensitively) # - regexp that is should not match (done case-insensitively) @@ -1379,7 +1561,7 @@ PerlSetVar lonIncludes /home/http # - a number that describes the minimum version that has mathml support # - a number that describes the minimum number version that has unicode support -PerlSetVar lonBrowsDet explorer:msie:netscape:msie\s(\d+\.\d+)\;:9999:9999&mozilla:mozilla\/[5-9]:msie:mozilla\/(\d+\.\d+)\s:9999:1&netscape:netscape:msie:netscape\/(\d+\.\d+):9999:7&netscape:netscape\/[7-9]:shouldnotmatch:netscape\/(\d+\.\d+):9999:7&amaya:amaya:mozilla:V(\d+\.\d+)\s:1:1&safari:safari:msie:safari\/([\d\.]+):9999:84 +PerlSetVar lonBrowsDet explorer:msie:netscape:msie\s(\d+\.\d+)\;:9999:5&mozilla:mozilla\/[5-9]:msie:mozilla\/(\d+\.\d+)\s:9999:1&netscape:netscape:msie:netscape\/(\d+\.\d+):9999:7&netscape:netscape\/[7-9]:shouldnotmatch:netscape\/(\d+\.\d+):9999:7&amaya:amaya:mozilla:V(\d+\.\d+)\s:1:1&safari:safari:msie:safari\/([\d\.]+):9999:84&chrome:chrome:shouldnotmatch:chrome\/(\d+\.\d+):9999:1 PerlSetVar lonTextBrowsers windows\s+ce:lynx PerlSetVar lonScansDir /home/httpd/scantron @@ -1395,12 +1577,6 @@ PerlSetVar FAQHost http://help.lon-capa PerlSetVar lonSqlAccess localhostkey -# ----------------------------------------------------------------------------- -# lonttpdPort is the port used by the lightweight graphics httpd server -# not the main Apache server -PerlSetVar lonhttpdPort 8080 - - #---------------------------------------------------------------------------- # # Parameters used by secure lond/lonc @@ -1471,6 +1647,9 @@ PerlSetVar SSLEmail certificate@lon- #------------------------------------------------------------------------- +# ====================================== Include support for SSL rewrites + +Include conf/loncapa_rewrite.conf # ====================================== Include machine-specific configuration