--- loncom/loncapa_apache.conf 2006/07/14 21:08:48 1.148 +++ loncom/loncapa_apache.conf 2010/08/20 20:33:24 1.185.8.3 @@ -1,7 +1,7 @@ ## ## loncapa_apache.conf -- Apache HTTP LON-CAPA configuration file ## -## $Id: loncapa_apache.conf,v 1.148 2006/07/14 21:08:48 raeburn Exp $ +## $Id: loncapa_apache.conf,v 1.185.8.3 2010/08/20 20:33:24 raeburn Exp $ ## # @@ -35,7 +35,9 @@ ExtendedStatus On # # ===================================================================== Aliases +Alias /zipspool/ /home/httpd/zipspool/ Alias /prtspool/ /home/httpd/prtspool/ +Alias /captchaspool/ /home/httpd/captchaspool/ ScriptAlias /cgi-bin/ "/home/httpd/cgi-bin/" # ================================================================= Directories @@ -49,6 +51,16 @@ PerlAuthenHandler Apache::checkauthen PerlSetVar lonOtherAuthen no #PerlWarn On + +PerlAuthenHandler 'sub { return OK }' + + +# Send proper expires header to avoid unnecessary HTTP request for static content + + ExpiresActive On + ExpiresDefault "access plus 12 hours" + + AuthType LONCAPA @@ -93,6 +105,18 @@ SetHandler perl-script PerlHandler Apache::portfolio + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpdfupload +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lontokacc PerlCleanupHandler Apache::lontokacc::removefile @@ -103,6 +127,8 @@ PerlCleanupHandler Apache::lonacc::clean AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc +PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck PerlHeaderParserHandler Apache::lonuploadrep ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html @@ -120,7 +146,9 @@ ErrorDocument 500 /adm/errorhandler -PerlAuthzHandler Apache::lonuploadedacc +PerlAuthenHandler Apache::lonuploadedacc +PerlAuthzHandler Apache::lonuploadedacc::skip_phase +PerlAccessHandler Apache::lonuploadedacc::skip_phase @@ -180,11 +208,25 @@ ErrorDocument 406 /adm/notinit.html ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonaboutme +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/notinit.html +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script +PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck PerlHandler Apache::lonsimplepage ErrorDocument 404 /adm/notfound.html ErrorDocument 406 /adm/notinit.html @@ -197,6 +239,7 @@ Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck PerlHandler Apache::lonbulletin ErrorDocument 404 /adm/notfound.html ErrorDocument 406 /adm/notinit.html @@ -262,6 +305,17 @@ ErrorDocument 406 /adm/roles ErrorDocument 413 /adm/overloaded.txt ErrorDocument 500 /adm/errorhandler + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/roles +ErrorDocument 413 /adm/overloaded.txt +ErrorDocument 500 /adm/errorhandler + # ------------------------------------------------------------------------- RAT @@ -343,6 +397,7 @@ PerlHandler Apache::lonrights SetHandler perl-script PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck PerlHandler Apache::lonxml @@ -351,10 +406,17 @@ SetHandler perl-script PerlHandler Apache::lonhomework + +SetHandler perl-script +PerlHandler Apache::lonxml + + AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc +PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck SetHandler perl-script PerlHandler Apache::lonwrapper ErrorDocument 403 /adm/login @@ -434,6 +496,7 @@ PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonroles ErrorDocument 403 /adm/login +ErrorDocument 409 /adm/preferences?action=lockwarning ErrorDocument 500 /adm/errorhandler @@ -457,6 +520,16 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpickauthor +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user @@ -467,6 +540,17 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpickuser +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user @@ -495,8 +579,21 @@ PerlHandler Apache::lonlogin PerlAccessHandler Apache::publiccheck AuthType LONCAPA +Require valid-user SetHandler perl-script +PerlAuthzHandler Apache::lonacc PerlHandler Apache::restrictedaccess +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA +Require valid-user +SetHandler perl-script +PerlAuthzHandler Apache::lonacc +PerlHandler Apache::blockedaccess +ErrorDocument 500 /adm/errorhandler @@ -506,6 +603,8 @@ PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonlogout ErrorDocument 403 /adm/login +ErrorDocument 409 /adm/preferences?action=lockwarning +ErrorDocument 500 /adm/errorhandler @@ -515,6 +614,7 @@ PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::switchserver ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler @@ -613,6 +713,17 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::courseprefs +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user @@ -646,6 +757,17 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonrequestcourse +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user @@ -668,6 +790,26 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::domainprefs +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::lonstatusacc +SetHandler perl-script +PerlHandler Apache::domainstatus +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + AuthType LONCAPA Require valid-user @@ -1064,7 +1206,7 @@ AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script -PerlHandler Apache::lonnavmaps +PerlHandler Apache::lonnavdisplay ErrorDocument 403 /adm/login ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler @@ -1105,6 +1247,7 @@ PerlAccessHandler Apache::publicche PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonhelp +ErrorDocument 500 /adm/errorhandler @@ -1113,6 +1256,7 @@ Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonhelpmenu +ErrorDocument 500 /adm/errorhandler @@ -1121,83 +1265,56 @@ Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonsupportreq +ErrorDocument 500 /adm/errorhandler SetHandler perl-script PerlHandler Apache::lonsupportreq +ErrorDocument 500 /adm/errorhandler SetHandler perl-script PerlHandler Apache::loncss +ErrorDocument 500 /adm/errorhandler -# ------------------------------------------------- Backdoor Adm Tests/Programs - - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - - - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - - - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - + +SetHandler perl-script +PerlHandler Apache::coursecatalog +ErrorDocument 500 /adm/errorhandler + - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - + +SetHandler perl-script +PerlHandler Apache::resetpw +ErrorDocument 500 /adm/errorhandler + - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - + +SetHandler perl-script +PerlHandler Apache::selfenroll +ErrorDocument 500 /adm/errorhandler + - -AuthName "harvest" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user reaper - + +SetHandler perl-script +PerlHandler Apache::createaccount +ErrorDocument 500 /adm/errorhandler + - -AuthName "Offline" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user offline - + +SetHandler perl-script +PerlHandler Apache::londns +ErrorDocument 500 /adm/errorhandler + - -AuthName "Offline" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user offline - +# ------------------------------------------------- Backdoor Adm Tests/Programs -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm +PerlAccessHandler Apache::lonstatusacc SetHandler perl-script -PerlAuthzHandler Apache::lonacc PerlHandler Apache::lontest @@ -1215,6 +1332,26 @@ PerlChildExitHandler Apache::lonacc::goo Options None AllowOverride None +order deny,allow +deny from all + + +# Allow uploaded files to be served + + +Options Includes FollowSymLinks +AllowOverride None +order allow,deny +allow from all + + +# Allow construction space files to be served + + +Options Includes FollowSymLinks +AllowOverride +order allow,deny +allow from all # Yes to symbolic links and server-side includes @@ -1230,27 +1367,52 @@ allow from all AllowOverride None -Options ExecCGI +Options ExecCGI FollowSymLinks +order allow,deny +allow from all + + +# Allow serving of files in prtspool + + +Options Includes FollowSymLinks +AllowOverride None +order allow,deny +allow from all + + +# Allow serving of files in zipspool + + +Options Includes FollowSymLinks +AllowOverride None +order allow,deny +allow from all + + +# Allow serving of files in captchaspool + + +Options Includes FollowSymLinks +AllowOverride None +order allow,deny +allow from all # ============================================================= Access Handlers # ------------------------------------------------- Allow server-status reports +PerlAccessHandler Apache::lonstatusacc SetHandler server-status -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm # ------------------------ Allow LON-CAPA "low-level" connection status reports - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - + +PerlAccessHandler Apache::lonstatusacc +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + # ------------------- Allow access to local system documentation from localhost Alias /doc /usr/doc @@ -1272,11 +1434,17 @@ PerlSetVar lonIconsURL /adm/lonIc PerlSetVar londPort 5663 PerlSetVar lonSysEMail korte@lite.msu.edu PerlSetVar lonDaemons /home/httpd/perl +PerlSetVar lonLib /home/httpd/lib PerlSetVar lonSockDir /home/httpd/sockets +PerlSetVar lonSockCreate /home/httpd/sockets/common PerlSetVar lonDocRoot /home/httpd/html PerlSetVar lonPrtDir /home/httpd/prtspool PerlSetVar lonIncludes /home/httpd/html/res/adm/includes -# & sepeareted list of : seperated fileds inorder of +PerlSetVar lonZipDir /home/httpd/zipspool +PerlSetVar lonCaptchaDir /home/httpd/captchaspool +PerlSetVar lonCaptchaDb /home/httpd/captchadb +PerlSetVar lonFontsDir /home/httpd/html/adm/fonts +# & separated list of : separated fields in order of # - internal name to call it, # - regexp that it should match (done case-insensitively) # - regexp that is should not match (done case-insensitively) @@ -1284,7 +1452,7 @@ PerlSetVar lonIncludes /home/http # - a number that describes the minimum version that has mathml support # - a number that describes the minimum number version that has unicode support -PerlSetVar lonBrowsDet explorer:msie:netscape:msie\s(\d+\.\d+)\;:9999:9999&mozilla:mozilla\/[5-9]:msie:mozilla\/(\d+\.\d+)\s:9999:1&netscape:netscape:msie:netscape\/(\d+\.\d+):9999:7&netscape:netscape\/[7-9]:shouldnotmatch:netscape\/(\d+\.\d+):9999:7&amaya:amaya:mozilla:V(\d+\.\d+)\s:1:1&safari:safari:msie:safari\/([\d\.]+):9999:84 +PerlSetVar lonBrowsDet explorer:msie:netscape:msie\s(\d+\.\d+)\;:9999:5&mozilla:mozilla\/[5-9]:msie:mozilla\/(\d+\.\d+)\s:9999:1&netscape:netscape:msie:netscape\/(\d+\.\d+):9999:7&netscape:netscape\/[7-9]:shouldnotmatch:netscape\/(\d+\.\d+):9999:7&amaya:amaya:mozilla:V(\d+\.\d+)\s:1:1&safari:safari:msie:safari\/([\d\.]+):9999:84 PerlSetVar lonTextBrowsers windows\s+ce:lynx PerlSetVar lonScansDir /home/httpd/scantron @@ -1300,12 +1468,6 @@ PerlSetVar FAQHost http://help.lon-capa PerlSetVar lonSqlAccess localhostkey -# ----------------------------------------------------------------------------- -# lonttpdPort is the port used by the lightweight graphics httpd server -# not the main Apache server -PerlSetVar lonhttpdPort 8080 - - #---------------------------------------------------------------------------- # # Parameters used by secure lond/lonc