--- loncom/loncapa_apache.conf 2004/03/16 23:02:43 1.73 +++ loncom/loncapa_apache.conf 2004/08/23 19:34:01 1.94 @@ -1,7 +1,7 @@ ## ## loncapa_apache.conf -- Apache HTTP LON-CAPA configuration file ## -## $Id: loncapa_apache.conf,v 1.73 2004/03/16 23:02:43 raeburn Exp $ +## $Id: loncapa_apache.conf,v 1.94 2004/08/23 19:34:01 albertel Exp $ ## # @@ -57,17 +57,51 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonenc +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::portfolio + + + +SetHandler perl-script +PerlHandler Apache::portfolio + + + + PerlAccessHandler Apache::lontokacc PerlCleanupHandler Apache::lontokacc::removefile -PerlAccessHandler Apache::lonuploadedacc +PerlAccessHandler Apache::lonacc +PerlHeaderParserHandler Apache::lonuploadrep +ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +SetHandler perl-script +PerlHandler Apache::lonpage + + + +SetHandler perl-script +PerlHandler Apache::lonsequence + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -97,6 +131,7 @@ ErrorDocument 500 /adm/errorhandler PerlAccessHandler Apache::lonacc SetHandler perl-script +PerlHandler Apache::londatecheck PerlHandler Apache::lonbulletin ErrorDocument 404 /adm/notfound.html ErrorDocument 406 /adm/notinit.html @@ -218,8 +253,9 @@ SetHandler perl-script PerlHandler Apache::lonrights - + SetHandler perl-script +PerlHandler Apache::londatecheck PerlHandler Apache::lonxml @@ -236,6 +272,16 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonsource +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -271,6 +317,15 @@ ErrorDocument 413 /adm/overloaded.tx ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lontrackstudent +ErrorDocument 403 /adm/login +ErrorDocument 413 /adm/overloaded.txt +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -311,6 +366,14 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpickcode +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + SetHandler perl-script PerlHandler Apache::lonlogin @@ -336,6 +399,14 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonspeller +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -563,6 +634,15 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonviewclasslist +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -719,6 +799,18 @@ SetHandler perl-script PerlHandler Apache::lonhelp + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonhelpmenu + + + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonsupportreq + + # ------------------------------------------------- Backdoor Adm Tests/Programs @@ -882,6 +974,77 @@ PerlSetVar lonSqlAccess localhos PerlSetVar lonhttpdPort 8080 +#---------------------------------------------------------------------------- +# +# Parameters used by secure lond/lonc + +# +# Secure lond/lonc require ssl certificate and private +# key files to function correctly. The certificate +# files need not be terribly secure, but the private key files +# should be set up so that only www (the lonc/lond effective user) +# can read them. +# +# The definition below is the full path to the directory that +# contains the certificate and key files: + +PerlSetVar lonCertificateDirectory /home/httpd/lonCerts + +# +# Secure lond/lonc require two certificates and a private host key. +# The certificates required are that of the lonCAPA certificate authority +# and the certificate that authority issued to this host. +# lonnetCertificateAuthority is the name of the file that contains the +# lonCAPA certificate authority's certificate. +# lonnetCertificate is the name of the file that contains the certificate +# issued to the host by the certificate authority. +# Both of these variables are names of files assumed to be in +# lonCertificateDirectory: + +PerlSetVar lonnetCertificateAuthority loncapaCA.pem +PerlSetVar lonnetCertificate lonhostcert.pem + +# +# To generate the request for a certificate, and to negotiate the +# initial ssl connection, the host requires a private key. This key +# is created at lonCAPA install time. Did we mention above that it +# should be set so that only www can read it? The variale below +# is the name of the file relative to lonnetCertificateDirectory +# that has the host's private key. Did we remember to tell you to +# keep the permissions on that file set to rw------- (0600)? +# + +PerlSetVar lonnetPrivateKey lonKey.pem + +# Did we mention that the file described above must have +# permissions really locked down so that it can't be stolen? + +#------------------------------------------------------------------------- + +# Parameters that define where all the ssl stuff is that's needed +# to generate certificate requests and, on a system that's a CA +# the certificate authority. +# +# SSLProgram -> Path to the openssl command +# SSLDirectory -> Directory containing ssl configuration files etc. +# SSLCAConfig -> Name of the SSL config file for the certificate +# Authority. +# SSLCAFile -> Full path to the Certificate authority file +# (on the cert manager system). +# SSLEmail -> E-mail address of loncapa certificate manager. +# The following are good for the loncapa redhat installs and +# the loncapa certificate authority system: +# +PerlSetVar SSLProgram /usr/bin/openssl +PerlSetVar SSLDirectory /usr/share/ssl +PerlSetVar SSLCAConfig loncapaca +PerlSetVar SSLCAFile /usr/share/ssl/loncapaca/cacert.pem +PerlSetVar SSLEmail certificate@lon-capa.org + +#------------------------------------------------------------------------- + + + # ====================================== Include machine-specific configuration