--- loncom/loncapa_apache.conf 2002/05/12 19:11:31 1.1 +++ loncom/loncapa_apache.conf 2023/12/29 20:23:53 1.215.2.30.2.6 @@ -1,18 +1,13 @@ ## ## loncapa_apache.conf -- Apache HTTP LON-CAPA configuration file ## -## $Id: loncapa_apache.conf,v 1.1 2002/05/12 19:11:31 harris41 Exp $ -## -## 1/11/2002 - Scott Harrison -## 2/19/2002 - Scott Harrison -## 2/28/2002 - Scott Harrison -## 3/2/2002 - Scott Harrison -## 5/12/2002 - Scott Harrison + +# $Id: loncapa_apache.conf,v 1.215.2.30.2.6 2023/12/29 20:23:53 raeburn Exp $ # # LON-CAPA Section (extensions to httpd.conf daemon configuration) # -# ======================================================================== User +# ================================================================ DocumentRoot DocumentRoot "/home/httpd/html" @@ -23,27 +18,69 @@ Group www # ======================================================= Shared Object Modules -LoadModule perl_module modules/libperl.so + + LoadModule perl_module modules/libperl.so + + AddModule mod_perl.c + + +PerlSetVar MODPERL2 1 + # =============================================================== Miscellaneous -ServerAdmin korte@lite.msu.edu +ServerAdmin consortium@loncapa.org ExtendedStatus On - # # LON-CAPA Section (extensions to srm.conf name space servicing) # # ===================================================================== Aliases +Alias /zipspool/ /home/httpd/zipspool/ Alias /prtspool/ /home/httpd/prtspool/ +Alias /captchaspool/ /home/httpd/captchaspool/ +Alias /webdav/ /home/httpd/html/priv/ +ScriptAlias /cgi-bin/ "/home/httpd/cgi-bin/" + + DAVLockDB /home/httpd/webdav/DAVLock + # ================================================================= Directories # ------------------------------------------------------------- Access Handlers - -PerlAccessHandler Apache::lonacc +PerlTransHandler Apache::lontrans +PerlCleanupHandler Apache::lonacc::cleanup + +PerlAuthenHandler Apache::checkauthen +PerlSetVar lonOtherAuthen no + + + PerlAuthenHandler Apache::lonshibauth + PerlSetVar lonOtherAuthen yes + PerlSetVar lonOtherAuthenType Shibboleth + + +#PerlWarn On + +PerlAuthzHandler 'sub { return OK }' + + +# Send proper expires header to avoid unnecessary HTTP request for static content + + ExpiresActive On + ExpiresDefault "access plus 12 hours" + Header set Cache-Control "public, no-transform" + + + + +AuthType LONCAPA +Require valid-user + +PerlAccessHandler Apache::publiccheck +PerlAuthzHandler Apache::lonacc PerlHeaderParserHandler Apache::lonrep ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html @@ -51,48 +88,332 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler - -PerlAccessHandler Apache::loncacc + + + + + + +SetHandler perl-script +PerlHandler Apache::lonencurl +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::portfolio + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::portfolio + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpdfupload +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +Options +FollowSymLinks -Includes +PerlAccessHandler Apache::lontokacc +PerlCleanupHandler Apache::lontokacc::removefile +PerlCleanupHandler Apache::lonacc::cleanup + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck +PerlHeaderParserHandler Apache::lonuploadrep +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + + Options +FollowSymLinks -Includes + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +PerlAuthenHandler Apache::lonuploadedacc +PerlAuthzHandler Apache::lonuploadedacc::skip_phase +PerlAccessHandler Apache::lonuploadedacc::skip_phase + + + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc + + + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc + + + +SetHandler perl-script +PerlHandler Apache::lonpage + + + +SetHandler perl-script +PerlHandler Apache::lonsequence + + + +SetHandler perl-script +PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck +PerlHandler Apache::lontex + + + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonsyllabus +ErrorDocument 404 /adm/notfound.html +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonrss +ErrorDocument 404 /adm/notfound.html +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonaboutme +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/notinit.html +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonaboutme +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/notinit.html +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck +PerlHandler Apache::lonsimplepage +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/notinit.html +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck +PerlHandler Apache::lonbulletin +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/notinit.html +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonsimpleproblemedit +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/notinit.html +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonslotcheck +PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck +PerlHandler Apache::lonexttool +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/notinit.html +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script -PerlHandler Apache::lonconstruct +PerlHandler Apache::lonexturlcheck ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized.html +ErrorDocument 406 /adm/unauthorized +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::loncacc +SetHandler perl-script +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/unauthorized ErrorDocument 500 /adm/errorhandler - + + + + AuthType Basic + AuthName "LONCAPA username,domain" + Require valid-user + SSLRequireSSL + PerlAuthenHandler Apache::lonwebdavauth + PerlAuthzHandler Apache::lonwebdavacc + Dav On + DirectoryIndex index.missing + Options Indexes FollowSymLinks + ErrorDocument 403 /adm/nowebdav.html + ErrorDocument 404 /adm/notfound.html + ErrorDocument 406 /adm/unauthorized + ErrorDocument 500 /adm/errorhandler + + + + RewriteEngine on + RewriteRule .* http://%{HTTP_HOST}/adm/nowebdav.html [L] + + + + + + RewriteEngine on + RewriteRule .* http://%{HTTP_HOST}/adm/nowebdav.html [L] + + + + + PerlAccessHandler Apache::lonracc - -PerlAccessHandler Apache::loncacc + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonhelper +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/unauthorized +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized.html +ErrorDocument 406 /adm/roles +ErrorDocument 413 /adm/overloaded.txt ErrorDocument 500 /adm/errorhandler -AllowOverride None + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/roles +ErrorDocument 413 /adm/overloaded.txt +ErrorDocument 500 /adm/errorhandler + # ------------------------------------------------------------------------- RAT - + SetHandler perl-script PerlHandler Apache::lonratedt - + SetHandler perl-script PerlHandler Apache::lonratedt - + SetHandler perl-script PerlHandler Apache::lonratsrv + +SetHandler perl-script +PerlHandler Apache::lonratmenu + + -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonratparms ErrorDocument 403 /adm/login @@ -101,77 +422,344 @@ ErrorDocument 500 /adm/errorhandler # --------------------------------------------- Resource Space Content Handlers - + SetHandler perl-script PerlHandler Apache::lonindexer +PerlCleanupHandler Apache::lonindexer::cleanup +PerlCleanupHandler Apache::lonacc::cleanup - + SetHandler perl-script PerlHandler Apache::lontex - + SetHandler perl-script PerlHandler Apache::lonpage - + SetHandler perl-script PerlHandler Apache::lonsequence - + +PerlAccessHandler Apache::publiccheck +SetHandler perl-script +PerlHandler Apache::lonmeta +ErrorDocument 413 /adm/overloaded.txt + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonmeta - + + + +SetHandler perl-script +PerlHandler Apache::lonrights + + + SetHandler perl-script +PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck PerlHandler Apache::lonxml - + SetHandler perl-script PerlHandler Apache::lonhomework + +SetHandler perl-script +PerlHandler Apache::lonxml + + -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck SetHandler perl-script PerlHandler Apache::lonwrapper ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonsource +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonlocalize +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + # -------------------------------------------------------------- Admin Programs + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::randomlylabel +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::imagechoice +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonsearchcourse +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonstatistics ErrorDocument 403 /adm/login +ErrorDocument 413 /adm/overloaded.txt +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lontrackstudent +ErrorDocument 403 /adm/login +ErrorDocument 413 /adm/overloaded.txt ErrorDocument 500 /adm/errorhandler -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonroles ErrorDocument 403 /adm/login +ErrorDocument 409 /adm/preferences?action=lockwarning +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonmainmenu +ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonremote +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpickauthor +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpickstudent +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpickuser +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpickcourse +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpickcode +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::londependencies +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::loncourseuser +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + SetHandler perl-script PerlHandler Apache::lonlogin + +SetHandler perl-script +PerlHandler Apache::ltiauth + + + +SetHandler perl-script +PerlHandler Apache::lonrelaunch + + + +SetHandler perl-script +PerlHandler Apache::ltiauth + + + +SetHandler perl-script +PerlHandler Apache::ltipassback + + + +SetHandler perl-script +PerlHandler Apache::ltiroster + + + +SetHandler perl-script +PerlHandler Apache::ltilogout + + + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::restrictedaccess +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::blockedaccess +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonprotected +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonlogout ErrorDocument 403 /adm/login +ErrorDocument 409 /adm/preferences?action=lockwarning +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::switchserver +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler @@ -179,49 +767,119 @@ SetHandler perl-script PerlHandler Apache::lonauth + +SetHandler perl-script +PerlHandler Apache::migrateuser + + + + Header set Cache-Control "private,no-store,no-cache,max-age=0" + + AuthType shibboleth + ShibUseEnvironment On + ShibRequestSetting requireSession 1 + ShibRequestSetting redirectToSSL 443 + require valid-user + PerlAuthzHandler Apache::lonshibacc + PerlAuthzHandler Apache::lonacc + ErrorDocument 403 /adm/login + ErrorDocument 500 /adm/errorhandler + + + PerlTypeHandler Apache::lonnoshib + + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonlinkexit +ErrorDocument 403 /adm/login +ErrorDocument 409 /adm/preferences?action=lockwarning +ErrorDocument 500 /adm/errorhandler + + -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::admannotations ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler - -PerlAccessHandler Apache::lonacc + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::admannotations +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script -PerlHandler Apache::admbookmarks +PerlHandler Apache::lonspeller ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonpageflip +PerlCleanupHandler Apache::lonpageflip::cleanup +PerlCleanupHandler Apache::lonacc::cleanup ErrorDocument 406 /adm/roles ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonambiguous +PerlCleanupHandler Apache::lonambiguous::cleanup +PerlCleanupHandler Apache::lonacc::cleanup ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script -PerlHandler Apache::lonmsg +PerlHandler Apache::lonmsgdisplay ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonnotify +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonparmset ErrorDocument 403 /adm/login @@ -229,8 +887,43 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::courseprefs +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::slotrequest +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonwizard +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::grades ErrorDocument 403 /adm/login @@ -238,8 +931,21 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonrequestcourse +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::loncreatecourse ErrorDocument 403 /adm/login @@ -247,8 +953,41 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonmodifycourse +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::domainprefs +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::lonstatusacc +SetHandler perl-script +PerlHandler Apache::domainstatus +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::loncreateuser ErrorDocument 403 /adm/login @@ -257,163 +996,376 @@ ErrorDocument 500 /adm/errorhandler -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonpublisher ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized.html +ErrorDocument 406 /adm/unauthorized ErrorDocument 500 /adm/errorhandler - -PerlAccessHandler Apache::loncacc + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::loncacc SetHandler perl-script PerlHandler Apache::lonpubdir ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized.html +ErrorDocument 406 /adm/unauthorized ErrorDocument 500 /adm/errorhandler - -PerlAccessHandler Apache::lonacc + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script -PerlHandler Apache::lonpubdir +PerlHandler Apache::lonunauthorized ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized.html ErrorDocument 500 /adm/errorhandler -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonretrieve ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized.html +ErrorDocument 406 /adm/unauthorized +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::loncleanup +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/unauthorized ErrorDocument 500 /adm/errorhandler -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::loncfile ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized.html +ErrorDocument 406 /adm/unauthorized ErrorDocument 500 /adm/errorhandler -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::londiff ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized.html +ErrorDocument 406 /adm/unauthorized ErrorDocument 500 /adm/errorhandler -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonupload ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized.html +ErrorDocument 406 /adm/unauthorized ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::imsimport +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/unauthorized +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::testbankimport +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/unauthorized +ErrorDocument 500 /adm/errorhandler + + -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonspreadsheet ErrorDocument 403 /adm/login ErrorDocument 406 /adm/roles +ErrorDocument 413 /adm/overloaded.txt ErrorDocument 500 /adm/errorhandler -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonspreadsheet ErrorDocument 403 /adm/login ErrorDocument 406 /adm/roles +ErrorDocument 413 /adm/overloaded.txt ErrorDocument 500 /adm/errorhandler -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonspreadsheet ErrorDocument 403 /adm/login ErrorDocument 406 /adm/roles +ErrorDocument 413 /adm/overloaded.txt ErrorDocument 500 /adm/errorhandler - -PerlAccessHandler Apache::lonacc + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script -PerlHandler Apache::lonchart +PerlHandler Apache::londropadd ErrorDocument 403 /adm/login ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler - -PerlAccessHandler Apache::lonacc + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script -PerlHandler Apache::londropadd +PerlHandler Apache::lonviewclasslist +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::loncoursegroups +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::groupboards +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::grouproster +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonwhatsnew +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpopulate +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonmanagekeys ErrorDocument 403 /adm/login ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonprintout ErrorDocument 403 /adm/login +ErrorDocument 413 /adm/overloaded.txt ErrorDocument 500 /adm/errorhandler -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonfeedback ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler - -PerlAccessHandler Apache::lonacc + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script -PerlHandler Apache::lonevaluate +PerlHandler Apache::londocs +PerlCleanupHandler Apache::londocs::untiehash +PerlCleanupHandler Apache::lonacc::cleanup ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler - -PerlAccessHandler Apache::lonacc + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script -PerlHandler Apache::lonpreferences +PerlHandler Apache::londocs +PerlCleanupHandler Apache::londocs::untiehash +PerlCleanupHandler Apache::lonacc::cleanup +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::imsimportdocs +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonextresedit +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonannounce +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonchat +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonchatfetch +ErrorDocument 413 /adm/overloaded.txt +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::longroupchat +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonevaluate ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler - -PerlAccessHandler Apache::lonacc + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script -PerlHandler Apache::lonassignments +PerlHandler Apache::lonpreferences ErrorDocument 403 /adm/login -ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::loncommunicate ErrorDocument 403 /adm/login @@ -421,78 +1373,198 @@ ErrorDocument 500 /adm/errorhandler -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonsearchcat +PerlCleanupHandler Apache::lonsearchcat::cleanup +PerlCleanupHandler Apache::lonacc::cleanup ErrorDocument 403 /adm/login +ErrorDocument 413 /adm/overloaded.txt ErrorDocument 500 /adm/errorhandler -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script -PerlHandler Apache::lonnavmaps +PerlHandler Apache::lonnavdisplay ErrorDocument 403 /adm/login ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonquickgrades +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + -PerlAccessHandler Apache::lonacc +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::groupsort +PerlCleanupHandler Apache::groupsort::cleanup +PerlCleanupHandler Apache::lonacc::cleanup ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonwishlistdisplay +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonblockingmenu +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonblockingstatus + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonaccesstimes +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + SetHandler perl-script PerlHandler Apache::lonerrorhandler -# ------------------------------------------------- Backdoor Adm Tests/Programs + +AuthType LONCAPA +Require valid-user +PerlAccessHandler Apache::publiccheck +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonhelp +ErrorDocument 500 /adm/errorhandler + - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - - - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - - - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - - - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonhelpmenu +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonsupportreq +ErrorDocument 500 /adm/errorhandler + + + +SetHandler perl-script +PerlHandler Apache::lonsupportreq +ErrorDocument 500 /adm/errorhandler + + + +SetHandler perl-script +PerlHandler Apache::loncss +ErrorDocument 500 /adm/errorhandler + + + +SetHandler perl-script +PerlHandler Apache::coursecatalog +ErrorDocument 500 /adm/errorhandler + + + +SetHandler perl-script +PerlHandler Apache::resetpw +ErrorDocument 500 /adm/errorhandler + + + +SetHandler perl-script +PerlHandler Apache::selfenroll +ErrorDocument 500 /adm/errorhandler + + + +SetHandler perl-script +PerlHandler Apache::createaccount +ErrorDocument 500 /adm/errorhandler + + + +SetHandler perl-script +PerlHandler Apache::londns +ErrorDocument 500 /adm/errorhandler + + + +SetHandler perl-script +PerlHandler Apache::spellcheck + + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lontiny +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + +# ------------------------------------------------- Backdoor Adm Tests/Programs -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm +PerlAccessHandler Apache::lonstatusacc SetHandler perl-script -PerlAccessHandler Apache::lonacc PerlHandler Apache::lontest # ------------------------------------------------------- Shutting down a child -PerlChildExitHandler Apache::lonnet::goodbye +PerlChildExitHandler Apache::lonacc::goodbye # # LON-CAPA Section (extensions to access.conf permission configuration) @@ -504,68 +1576,271 @@ PerlChildExitHandler Apache::lonnet::goo Options None AllowOverride None + + Require all denied + + + order deny,allow + deny from all + +# Allow uploaded files to be served + + +Options FollowSymLinks +AllowOverride None + + Require all granted + + + order allow,deny + allow from all + + + # Yes to symbolic links and server-side includes -Options Includes FollowSymLinks +Options FollowSymLinks AllowOverride None -order allow,deny -allow from all + + Require all granted + + + order allow,deny + allow from all + # If it is in cgi-bin, then it can be executed as a CGI script. AllowOverride None -Options ExecCGI +Options ExecCGI FollowSymLinks + + Require all granted + + + order allow,deny + allow from all + +# Allow serving of files in prtspool + + +Options FollowSymLinks +AllowOverride None + + Require all granted + + + order allow,deny + allow from all + + + +# Allow serving of files in zipspool + + +Options FollowSymLinks +AllowOverride None + + Require all granted + + + order allow,deny + allow from all + + + +# Allow serving of files in captchaspool + + +Options FollowSymLinks +AllowOverride None + + Require all granted + + + order allow,deny + allow from all + + + + + DirectoryIndex disabled + + + + DirectoryIndex disabled + + # ============================================================= Access Handlers # ------------------------------------------------- Allow server-status reports +PerlAccessHandler Apache::lonstatusacc SetHandler server-status -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm # ------------------------ Allow LON-CAPA "low-level" connection status reports - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - + +PerlAccessHandler Apache::lonstatusacc +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + # ------------------- Allow access to local system documentation from localhost Alias /doc /usr/doc -order deny,allow -deny from all -allow from localhost Options Indexes FollowSymLinks + + Require local + + + order deny,allow + deny from all + allow from localhost + # ******** THESE "SHOULD" NEVER BE ALTERED BY THE USER ************************ # ====================================== Internal Settings / Perl Configuration +PerlSetVar lonVersion '' PerlSetVar lonIDsDir /home/httpd/lonIDs +PerlSetVar lonBalanceDir /home/httpd/balanceIDs +PerlSetVar lonDAVsessDir /home/httpd/webdav/sessionIDs PerlSetVar lonTabDir /home/httpd/lonTabs PerlSetVar lonUsersDir /home/httpd/lonUsers PerlSetVar lonIconsURL /adm/lonIcons PerlSetVar londPort 5663 -PerlSetVar lonSysEMail korte@lite.msu.edu +PerlSetVar lonSysEMail techsupport@loncapa.org PerlSetVar lonDaemons /home/httpd/perl +PerlSetVar lonLib /home/httpd/lib PerlSetVar lonSockDir /home/httpd/sockets +PerlSetVar lonSockCreate /home/httpd/sockets/common PerlSetVar lonDocRoot /home/httpd/html +PerlSetVar lonPrtDir /home/httpd/prtspool PerlSetVar lonIncludes /home/httpd/html/res/adm/includes -PerlSetVar lonBrowsDet netscape:mozilla:msie:mozilla\/(\d+\.\d+)\s:9999&explorer:msie:netscape:msie\s(\d+\.\d+)\;:9999&mozilla:mozilla\/[5-9]:msie:mozilla\/(\d+\.\d+)\s:9999&amaya:amaya:mozilla:V(\d+\.\d+)\s:1 +PerlSetVar lonZipDir /home/httpd/zipspool +PerlSetVar lonCaptchaDir /home/httpd/captchaspool +PerlSetVar lonCaptchaDb /home/httpd/captchadb +PerlSetVar lonLTIDir /home/httpd/lonLTItmp +PerlSetVar ltiIDsDir /home/httpd/ltiIDs +PerlSetVar lonFontsDir /home/httpd/html/adm/fonts +# & separated list of % separated fields in order of +# - internal name to call it, +# - regexp that it should match (done case-insensitively) +# - regexp that is should not match (done case-insensitively) +# - regexp that will pull out the version number into $1 +# - a number that describes the minimum version that has mathml support +# - a number that describes the minimum number version that has unicode support + +PerlSetVar lonBrowsDet explorer%msie%netscape%msie\s(\d+\.\d+)\;%9999%5&mozilla%mozilla\/[5-9]%msie%mozilla\/(\d+\.\d+)\s%9999%1&netscape%netscape%msie%netscape\/(\d+\.\d+)%9999%7&netscape%netscape\/[7-9]%shouldnotmatch%netscape\/(\d+\.\d+)%9999%7&amaya%amaya%mozilla%V(\d+\.\d+)\s%1%1&safari%safari%msie%safari\/([\d\.]+)%9999%84&chrome%chrome%chromeframe%\s+chrome\/(\d+\.\d+)%9999%1&explorer%\s+rv\:\d+\.\d+%firefox%\s+rv\:(\d+\.\d+)%9999%5&opera%\sOPR\/\d+\.\d+%shouldnotmatch%\sOPR\/(\d+\.\d+)%9999%6&opera%^Opera\/9.80\s.+Version\/\d+\.\d+$%shouldnotmatch%Version\/(\d+\.\d+)$%9999%6&opera%^Opera\/\d+\.\d+\s%Version\/\d+\.\d+$%^Opera\/(\d+\.\d+)\s%9999%6 + +PerlSetVar lonTextBrowsers windows\s+ce:lynx +PerlSetVar lonScansDir /home/httpd/scantron +PerlSetVar lonScriptTimeout 10 +PerlSetVar BugzillaHost https://bugs.loncapa.org/ +PerlSetVar FAQHost http://help.lon-capa.org/ +# ----------------------------------------------------------------------------- +# NOTE: lonSqlAccess key is the password for the MySQL user +# www@localhost. This value must always be "localhostkey". +# The only security risk occurs when somebody logs in as 'www' on your system +# (in which case you have much bigger problems than whether or not they +# can access the non-authoritative loncapa database on your machine). + +PerlSetVar lonSqlAccess localhostkey + +#---------------------------------------------------------------------------- +# +# Parameters used by secure lond/lonc + +# +# Secure lond/lonc require ssl certificate and private +# key files to function correctly. The certificate +# files need not be terribly secure, but the private key files +# should be set up so that only www (the lonc/lond effective user) +# can read them. +# +# The definition below is the full path to the directory that +# contains the certificate and key files: + +PerlSetVar lonCertificateDirectory /home/httpd/lonCerts + +# +# Secure lond/lonc require two certificates and a private host key. +# The certificates required are that of the lonCAPA certificate authority +# and the certificate that authority issued to this host. +# lonnetCertificateAuthority is the name of the file that contains the +# lonCAPA certificate authority's certificate. +# lonnetCertificate is the name of the file that contains the certificate +# issued to the host by the certificate authority. +# Both of these variables are names of files assumed to be in +# lonCertificateDirectory: + +PerlSetVar lonnetCertificateAuthority loncapaCA.pem +PerlSetVar lonnetCertificate lonhostcert.pem + +# +# To generate the request for a certificate, and to negotiate the +# initial ssl connection, the host requires a private key. This key +# is created at lonCAPA install time. Did we mention above that it +# should be set so that only www can read it? The variale below +# is the name of the file relative to lonnetCertificateDirectory +# that has the host's private key. Did we remember to tell you to +# keep the permissions on that file set to rw------- (0600)? +# + +PerlSetVar lonnetPrivateKey lonKey.pem + +# Did we mention that the file described above must have +# permissions really locked down so that it can't be stolen? + +#------------------------------------------------------------------------- + +# Parameters that define where all the ssl stuff is that's needed +# to generate certificate requests and, on a system that's a CA +# the certificate authority. +# +# SSLProgram -> Path to the openssl command +# SSLDirectory -> Directory containing ssl configuration files etc. +# SSLCAConfig -> Name of the SSL config file for the certificate +# Authority. +# SSLCAFile -> Full path to the Certificate authority file +# (on the cert manager system). +# SSLEmail -> E-mail address of loncapa certificate manager. +# The following are good for the loncapa redhat installs and +# the loncapa certificate authority system: +# +PerlSetVar SSLProgram /usr/bin/openssl +PerlSetVar SSLDirectory /usr/share/ssl +PerlSetVar SSLCAConfig loncapaca +PerlSetVar SSLCAFile /usr/share/ssl/loncapaca/cacert.pem +PerlSetVar SSLEmail certificate@lon-capa.org + +#------------------------------------------------------------------------- + + +# ====================================== Include support for SSL rewrites + +Include conf/loncapa_rewrite.conf + + +# ====================================== Include machine-specific configuration + +Include conf/loncapa.conf + +# ================================================= Include local configuration + +Include conf/loncapa_apache_local*.conf # ================================================== Initiate mod_perl starting PerlRequire conf/startup.pl + PerlFreshRestart On +