--- loncom/loncapa_apache.conf 2004/01/15 20:22:47 1.71 +++ loncom/loncapa_apache.conf 2004/08/13 15:50:16 1.90.2.1 @@ -1,7 +1,7 @@ ## ## loncapa_apache.conf -- Apache HTTP LON-CAPA configuration file ## -## $Id: loncapa_apache.conf,v 1.71 2004/01/15 20:22:47 www Exp $ +## $Id: loncapa_apache.conf,v 1.90.2.1 2004/08/13 15:50:16 albertel Exp $ ## # @@ -57,17 +57,51 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonenc +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::portfolio + + + +SetHandler perl-script +PerlHandler Apache::portfolio + + + + PerlAccessHandler Apache::lontokacc PerlCleanupHandler Apache::lontokacc::removefile -PerlAccessHandler Apache::lonuploadedacc +PerlAccessHandler Apache::lonacc +PerlHeaderParserHandler Apache::lonuploadrep +ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +SetHandler perl-script +PerlHandler Apache::lonpage + + + +SetHandler perl-script +PerlHandler Apache::lonsequence + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -218,8 +252,9 @@ SetHandler perl-script PerlHandler Apache::lonrights - + SetHandler perl-script +PerlHandler Apache::londatecheck PerlHandler Apache::lonxml @@ -236,6 +271,16 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonsource +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -311,6 +356,14 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpickcode +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + SetHandler perl-script PerlHandler Apache::lonlogin @@ -504,6 +557,26 @@ ErrorDocument 406 /adm/unauthorized ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::imsimport +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/unauthorized +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::testbankimport +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/unauthorized +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -587,6 +660,14 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::imsimportdocs +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -691,6 +772,18 @@ SetHandler perl-script PerlHandler Apache::lonhelp + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonhelpmenu + + + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonsupportreq + + # ------------------------------------------------- Backdoor Adm Tests/Programs @@ -854,6 +947,77 @@ PerlSetVar lonSqlAccess localhos PerlSetVar lonhttpdPort 8080 +#---------------------------------------------------------------------------- +# +# Parameters used by secure lond/lonc + +# +# Secure lond/lonc require ssl certificate and private +# key files to function correctly. The certificate +# files need not be terribly secure, but the private key files +# should be set up so that only www (the lonc/lond effective user) +# can read them. +# +# The definition below is the full path to the directory that +# contains the certificate and key files: + +PerlSetVar lonCertificateDirectory /home/httpd/lonCerts + +# +# Secure lond/lonc require two certificates and a private host key. +# The certificates required are that of the lonCAPA certificate authority +# and the certificate that authority issued to this host. +# lonnetCertificateAuthority is the name of the file that contains the +# lonCAPA certificate authority's certificate. +# lonnetCertificate is the name of the file that contains the certificate +# issued to the host by the certificate authority. +# Both of these variables are names of files assumed to be in +# lonCertificateDirectory: + +PerlSetVar lonnetCertificateAuthority loncapaCA.pem +PerlSetVar lonnetCertificate lonhostcert.pem + +# +# To generate the request for a certificate, and to negotiate the +# initial ssl connection, the host requires a private key. This key +# is created at lonCAPA install time. Did we mention above that it +# should be set so that only www can read it? The variale below +# is the name of the file relative to lonnetCertificateDirectory +# that has the host's private key. Did we remember to tell you to +# keep the permissions on that file set to rw------- (0600)? +# + +PerlSetVar lonnetPrivateKey lonKey.pem + +# Did we mention that the file described above must have +# permissions really locked down so that it can't be stolen? + +#------------------------------------------------------------------------- + +# Parameters that define where all the ssl stuff is that's needed +# to generate certificate requests and, on a system that's a CA +# the certificate authority. +# +# SSLProgram -> Path to the openssl command +# SSLDirectory -> Directory containing ssl configuration files etc. +# SSLCAConfig -> Name of the SSL config file for the certificate +# Authority. +# SSLCAFile -> Full path to the Certificate authority file +# (on the cert manager system). +# SSLEmail -> E-mail address of loncapa certificate manager. +# The following are good for the loncapa redhat installs and +# the loncapa certificate authority system: +# +PerlSetVar SSLProgram /usr/bin/openssl +PerlSetVar SSLDirectory /usr/share/ssl +PerlSetVar SSLCAConfig loncapaca +PerlSetVar SSLCAFile /usr/share/ssl/loncapaca/cacert.pem +PerlSetVar SSLEmail certificate@lon-capa.org + +#------------------------------------------------------------------------- + + + # ====================================== Include machine-specific configuration