File:  [LON-CAPA] / loncom / loncapa_apache.conf
Revision 1.267: download - view: text, annotated - select for diffs
Sun Jan 27 16:02:51 2019 UTC (5 years, 3 months ago) by raeburn
Branches: MAIN
CVS tags: HEAD
- Bug 6400
  - Enforce access restrictions for content which is deeplink-only (users
    with "advanced priv for current role are exempt).
  - Support "key" link type in deeplink parameter (requested link must either
    be sent with linkkey as element in POSTed data, or with linkkey in query
    string).  Corresponding value must match key set in deeplink parameter.

    1: ##
    2: ## loncapa_apache.conf -- Apache HTTP LON-CAPA configuration file
    3: ##
    4: 
    5: # $Id: loncapa_apache.conf,v 1.267 2019/01/27 16:02:51 raeburn Exp $
    6: 
    7: #
    8: # LON-CAPA Section (extensions to httpd.conf daemon configuration)
    9: #
   10: # ================================================================ DocumentRoot
   11: 
   12: DocumentRoot "/home/httpd/html"
   13: 
   14: # ======================================================================== User
   15: 
   16: User www
   17: Group www
   18: 
   19: # ======================================================= Shared Object Modules
   20: 
   21: <IfModule !perl_module>
   22:     LoadModule perl_module       modules/libperl.so
   23: </IfModule>
   24: <IfDefine !MODPERL2>
   25: AddModule mod_perl.c
   26: </IfDefine>
   27: 
   28: <IfDefine MODPERL2>
   29: PerlSetVar	MODPERL2	1
   30: </IfDefine>
   31: # =============================================================== Miscellaneous
   32: 
   33: ServerAdmin consortium@loncapa.org
   34: ExtendedStatus On
   35: #
   36: # LON-CAPA Section (extensions to srm.conf name space servicing)
   37: #
   38: # ===================================================================== Aliases
   39: 
   40: Alias /zipspool/ /home/httpd/zipspool/
   41: Alias /prtspool/ /home/httpd/prtspool/
   42: Alias /captchaspool/ /home/httpd/captchaspool/
   43: Alias /webdav/ /home/httpd/html/priv/
   44: ScriptAlias /cgi-bin/ "/home/httpd/cgi-bin/"
   45: <IfModule mod_dav_fs.c>
   46:     DAVLockDB /home/httpd/webdav/DAVLock
   47: </IfModule>
   48: 
   49: # ================================================================= Directories
   50: 
   51: # ------------------------------------------------------------- Access Handlers
   52: 
   53: PerlTransHandler	Apache::lontrans
   54: PerlCleanupHandler	Apache::lonacc::cleanup
   55: 
   56: PerlAuthenHandler Apache::checkauthen
   57: PerlSetVar lonOtherAuthen no
   58: 
   59: <IfModule mod_shib>
   60:     PerlAuthenHandler Apache::lonshibauth
   61:     PerlSetVar lonOtherAuthen yes
   62:     PerlSetVar lonOtherAuthenType Shibboleth
   63: </IfModule>
   64: 
   65: #PerlWarn On
   66: <LocationMatch "^/+res/adm/pages/[^/]+\.(gif|png)$">
   67: PerlAuthzHandler	'sub { return OK }' 
   68: </LocationMatch>
   69: 
   70: # Send proper expires header to avoid unnecessary HTTP request for static content
   71: <LocationMatch "^(/adm/lonIcons|/adm/jQuery|/res/adm/pages|/ckeditor|/adm/jpicker|/adm/countdown|/adm/spellchecker|/adm/nicescroll|/adm/MathJax|/adm/daxe)">
   72:         ExpiresActive On
   73:         ExpiresDefault "access plus 12 hours"
   74:         Header set Cache-Control "public, no-transform"
   75: </LocationMatch>
   76: 
   77: <LocationMatch "^/+res.*">
   78: 
   79: AuthType LONCAPA
   80: Require valid-user
   81: 
   82: PerlAccessHandler      Apache::publiccheck
   83: PerlAuthzHandler       Apache::lonacc
   84: PerlHeaderParserHandler Apache::lonrep
   85: ErrorDocument     403 /adm/login
   86: ErrorDocument     404 /adm/notfound.html
   87: ErrorDocument     406 /adm/roles
   88: ErrorDocument	  500 /adm/errorhandler
   89: </LocationMatch>
   90: 
   91: 
   92: <LocationMatch "/.*">
   93: </LocationMatch>
   94: 
   95: 
   96: <LocationMatch "^/+enc.*">
   97: SetHandler perl-script
   98: PerlHandler       Apache::lonencurl
   99: ErrorDocument     403 /adm/login
  100: ErrorDocument     404 /adm/notfound.html
  101: ErrorDocument     406 /adm/roles
  102: ErrorDocument	  500 /adm/errorhandler
  103: </LocationMatch>
  104: 
  105: <Location /adm/portfolio>
  106: AuthType LONCAPA
  107: Require valid-user
  108: PerlAuthzHandler Apache::lonacc
  109: SetHandler perl-script
  110: PerlHandler Apache::portfolio
  111: </Location>
  112: 
  113: <Location /adm/coursegrp_portfolio>
  114: AuthType LONCAPA
  115: Require valid-user
  116: PerlAuthzHandler Apache::lonacc
  117: SetHandler perl-script
  118: PerlHandler Apache::portfolio
  119: </Location>
  120: 
  121: <Location /adm/pdfupload>
  122: AuthType LONCAPA
  123: Require valid-user
  124: PerlAuthzHandler Apache::lonacc
  125: SetHandler perl-script
  126: PerlHandler             Apache::lonpdfupload
  127: ErrorDocument     403 /adm/login
  128: ErrorDocument     404 /adm/notfound.html
  129: ErrorDocument     406 /adm/roles
  130: ErrorDocument     500 /adm/errorhandler
  131: </Location>
  132: 
  133: <LocationMatch "^/+userfiles.*">
  134: PerlAccessHandler       Apache::lontokacc
  135: PerlCleanupHandler	Apache::lontokacc::removefile
  136: PerlCleanupHandler	Apache::lonacc::cleanup
  137: </LocationMatch>
  138: 
  139: <LocationMatch "^/+uploaded.*">
  140: AuthType LONCAPA
  141: Require valid-user
  142: PerlAuthzHandler	Apache::lonacc
  143: PerlHandler 		Apache::londatecheck
  144: PerlHandler  		Apache::lonipcheck
  145: PerlHeaderParserHandler Apache::lonuploadrep
  146: ErrorDocument     403 /adm/login
  147: ErrorDocument     404 /adm/notfound.html
  148: ErrorDocument     406 /adm/roles
  149: ErrorDocument	  500 /adm/errorhandler
  150: </LocationMatch>
  151: 
  152: <LocationMatch "^/+editupload.*">
  153: AuthType LONCAPA
  154: Require valid-user
  155: PerlAuthzHandler	Apache::lonacc
  156: ErrorDocument     403 /adm/login
  157: ErrorDocument     406 /adm/roles
  158: ErrorDocument	  500 /adm/errorhandler
  159: </LocationMatch>
  160: 
  161: <LocationMatch "^/+uploaded/.*/.*/internal/.*">
  162: PerlAuthenHandler	Apache::lonuploadedacc
  163: PerlAuthzHandler	Apache::lonuploadedacc::skip_phase
  164: PerlAccessHandler	Apache::lonuploadedacc::skip_phase
  165: </LocationMatch>
  166: 
  167: <LocationMatch "^/+uploaded/.*/.*/portfolio/.*">
  168: PerlAccessHandler      Apache::publiccheck
  169: AuthType LONCAPA
  170: Require valid-user
  171: PerlAuthzHandler       Apache::lonacc
  172: </LocationMatch>
  173: 
  174: <LocationMatch "^/+uploaded/.*/.*/groups/.*/portfolio/.*">
  175: PerlAccessHandler      Apache::publiccheck
  176: AuthType LONCAPA
  177: Require valid-user
  178: PerlAuthzHandler       Apache::lonacc
  179: </LocationMatch>
  180: 
  181: <LocationMatch "^/+uploaded/.*\.page$">
  182: SetHandler perl-script
  183: PerlHandler Apache::lonpage
  184: </LocationMatch>
  185: 
  186: <LocationMatch "^/+uploaded/.*\.sequence$">
  187: SetHandler perl-script
  188: PerlHandler Apache::lonsequence
  189: </LocationMatch>
  190: 
  191: <LocationMatch "^/+public/.*/syllabus$">
  192: PerlAccessHandler      Apache::publiccheck
  193: AuthType LONCAPA
  194: Require valid-user
  195: PerlAuthzHandler	Apache::lonacc
  196: SetHandler              perl-script
  197: PerlHandler             Apache::lonsyllabus
  198: ErrorDocument     404 /adm/notfound.html
  199: ErrorDocument	  500 /adm/errorhandler
  200: </LocationMatch>
  201: 
  202: <LocationMatch "^/+(public|adm)/.*(\.rss|_rss\.html)$">
  203: PerlAccessHandler      Apache::publiccheck
  204: AuthType LONCAPA
  205: Require valid-user
  206: PerlAuthzHandler	Apache::lonacc
  207: SetHandler              perl-script
  208: PerlHandler             Apache::lonrss
  209: ErrorDocument     404 /adm/notfound.html
  210: ErrorDocument	  500 /adm/errorhandler
  211: </LocationMatch>
  212: 
  213: <LocationMatch "^/adm/.*/aboutme$">
  214: AuthType LONCAPA
  215: Require valid-user
  216: PerlAuthzHandler	Apache::lonacc
  217: SetHandler              perl-script
  218: PerlHandler             Apache::lonaboutme
  219: ErrorDocument     404 /adm/notfound.html
  220: ErrorDocument     406 /adm/notinit.html
  221: ErrorDocument	  500 /adm/errorhandler
  222: </LocationMatch>
  223: 
  224: <LocationMatch "^/adm/.*/aboutme/portfolio$">
  225: PerlAccessHandler       Apache::publiccheck
  226: AuthType LONCAPA
  227: Require valid-user
  228: PerlAuthzHandler	Apache::lonacc
  229: SetHandler              perl-script
  230: PerlHandler             Apache::lonaboutme
  231: ErrorDocument     404 /adm/notfound.html
  232: ErrorDocument     406 /adm/notinit.html
  233: ErrorDocument	  500 /adm/errorhandler
  234: </LocationMatch>
  235: 
  236: <LocationMatch "^/adm/.*/smppg$">
  237: AuthType LONCAPA
  238: Require valid-user
  239: PerlAuthzHandler	Apache::lonacc
  240: SetHandler              perl-script
  241: PerlHandler             Apache::londatecheck
  242: PerlHandler		Apache::lonipcheck
  243: PerlHandler             Apache::lonsimplepage
  244: ErrorDocument     404 /adm/notfound.html
  245: ErrorDocument     406 /adm/notinit.html
  246: ErrorDocument	  500 /adm/errorhandler
  247: </LocationMatch>
  248: 
  249: <LocationMatch "^/adm/.*/bulletinboard$">
  250: AuthType LONCAPA
  251: Require valid-user
  252: PerlAuthzHandler	Apache::lonacc
  253: SetHandler              perl-script
  254: PerlHandler             Apache::londatecheck
  255: PerlHandler		Apache::lonipcheck
  256: PerlHandler             Apache::lonbulletin
  257: ErrorDocument     404 /adm/notfound.html
  258: ErrorDocument     406 /adm/notinit.html
  259: ErrorDocument	  500 /adm/errorhandler
  260: </LocationMatch>
  261: 
  262: <LocationMatch "\.problem/smpedit$">
  263: AuthType LONCAPA
  264: Require valid-user
  265: PerlAuthzHandler	Apache::lonacc
  266: SetHandler              perl-script
  267: PerlHandler             Apache::lonsimpleproblemedit
  268: ErrorDocument     404 /adm/notfound.html
  269: ErrorDocument     406 /adm/notinit.html
  270: ErrorDocument	  500 /adm/errorhandler
  271: </LocationMatch>
  272: 
  273: <LocationMatch "^/adm/.*/ext\.tool$">
  274: AuthType LONCAPA
  275: Require valid-user
  276: PerlAuthzHandler        Apache::lonacc
  277: SetHandler              perl-script
  278: PerlHandler             Apache::londatecheck
  279: PerlHandler             Apache::lonipcheck
  280: PerlHandler             Apache::lonexttool
  281: ErrorDocument     404 /adm/notfound.html
  282: ErrorDocument     406 /adm/notinit.html
  283: ErrorDocument     500 /adm/errorhandler
  284: </LocationMatch>
  285: 
  286: <LocationMatch "^/adm/placement$">
  287: AuthType LONCAPA
  288: Require valid-user
  289: PerlAuthzHandler        Apache::lonacc
  290: SetHandler              perl-script
  291: PerlHandler             Apache::lonplacementtest
  292: ErrorDocument     404 /adm/notfound.html
  293: ErrorDocument     406 /adm/notinit.html
  294: ErrorDocument     500 /adm/errorhandler
  295: </LocationMatch>
  296: 
  297: <LocationMatch "^/+priv/.*">
  298: AuthType LONCAPA
  299: Require valid-user
  300: PerlAuthzHandler Apache::loncacc
  301: SetHandler        perl-script
  302: ErrorDocument     403 /adm/login
  303: ErrorDocument     404 /adm/notfound.html
  304: ErrorDocument     406 /adm/unauthorized
  305: ErrorDocument	  500 /adm/errorhandler
  306: </LocationMatch>
  307: 
  308: <LocationMatch "^/+webdav/[\w\-.]+/\w[\w.\-\@]+/">
  309:   <IfModule mod_dav.c>
  310:     <IfModule mod_ssl.c>
  311:       AuthType Basic
  312:       AuthName "LONCAPA username,domain"
  313:       Require valid-user
  314:       SSLRequireSSL
  315:       PerlAuthenHandler Apache::lonwebdavauth
  316:       PerlAuthzHandler Apache::lonwebdavacc
  317:       Dav On
  318:       DirectoryIndex index.missing
  319:       Options Indexes FollowSymLinks
  320:       ErrorDocument     403 /adm/nowebdav.html
  321:       ErrorDocument     404 /adm/notfound.html
  322:       ErrorDocument     406 /adm/unauthorized
  323:       ErrorDocument     500 /adm/errorhandler
  324:     </IfModule>
  325:     <IfModule !mod_ssl.c>
  326:       <IfModule mod_rewrite.c>
  327:         RewriteEngine on
  328:         RewriteRule .* http://%{HTTP_HOST}/adm/nowebdav.html [L]
  329:       </IfModule>
  330:     </IfModule>
  331:   </IfModule>
  332:   <IfModule !mod_dav.c>
  333:     <IfModule mod_rewrite.c>
  334:       RewriteEngine on
  335:       RewriteRule .* http://%{HTTP_HOST}/adm/nowebdav.html [L]
  336:     </IfModule>
  337:   </IfModule>
  338: </LocationMatch>
  339: 
  340: <LocationMatch "^/+raw.*">
  341: PerlAccessHandler Apache::lonracc
  342: </LocationMatch>
  343: 
  344: <LocationMatch "^/adm/helper/.*\.helper$">
  345: AuthType LONCAPA
  346: Require valid-user
  347: PerlAuthzHandler  Apache::lonacc
  348: SetHandler        perl-script
  349: PerlHandler       Apache::lonhelper
  350: ErrorDocument     403 /adm/login
  351: ErrorDocument     404 /adm/notfound.html
  352: ErrorDocument     406 /adm/unauthorized
  353: ErrorDocument     500 /adm/errorhandler
  354: </LocationMatch>
  355: 
  356: <LocationMatch "/prtspool">
  357: AuthType LONCAPA
  358: Require valid-user
  359: PerlAuthzHandler Apache::lonacc
  360: ErrorDocument     403 /adm/login
  361: ErrorDocument     404 /adm/notfound.html
  362: ErrorDocument     406 /adm/roles
  363: ErrorDocument     413 /adm/overloaded.txt
  364: ErrorDocument	  500 /adm/errorhandler
  365: </LocationMatch>
  366: 
  367: <LocationMatch "/zipspool">
  368: AuthType LONCAPA
  369: Require valid-user
  370: PerlAuthzHandler Apache::lonacc
  371: ErrorDocument     403 /adm/login
  372: ErrorDocument     404 /adm/notfound.html
  373: ErrorDocument     406 /adm/roles
  374: ErrorDocument     413 /adm/overloaded.txt
  375: ErrorDocument	  500 /adm/errorhandler
  376: </LocationMatch>
  377: # ------------------------------------------------------------------------- RAT
  378: 
  379: <LocationMatch "^/+priv/.*\.sequence$">
  380: SetHandler perl-script
  381: PerlHandler Apache::lonratedt
  382: </LocationMatch>
  383: 
  384: <LocationMatch "^/+priv/.*\.page$">
  385: SetHandler perl-script
  386: PerlHandler Apache::lonratedt
  387: </LocationMatch>
  388: 
  389: <LocationMatch "^/+priv/.*\/ratserver$">
  390: SetHandler perl-script
  391: PerlHandler Apache::lonratsrv
  392: </LocationMatch>
  393: 
  394: <LocationMatch "^/+priv/.*\/adveditmenu$">
  395: SetHandler perl-script
  396: PerlHandler Apache::lonratmenu
  397: </LocationMatch>
  398: 
  399: <Location /adm/ratparms>
  400: AuthType LONCAPA
  401: Require valid-user
  402: PerlAuthzHandler       Apache::lonacc
  403: SetHandler perl-script
  404: PerlHandler Apache::lonratparms
  405: ErrorDocument     403 /adm/login
  406: ErrorDocument	  500 /adm/errorhandler
  407: </Location>
  408: 
  409: # --------------------------------------------- Resource Space Content Handlers
  410: 
  411: <LocationMatch "^/+res.*/$">
  412: SetHandler perl-script
  413: PerlHandler Apache::lonindexer
  414: PerlCleanupHandler Apache::lonindexer::cleanup
  415: PerlCleanupHandler	Apache::lonacc::cleanup
  416: </LocationMatch>
  417: 
  418: <LocationMatch "^/+res.*\.tex$">
  419: SetHandler perl-script
  420: PerlHandler Apache::lontex
  421: </LocationMatch>
  422: 
  423: <LocationMatch "^/+res/.*\.page$">
  424: SetHandler perl-script
  425: PerlHandler Apache::lonpage
  426: </LocationMatch>
  427: 
  428: <LocationMatch "^/+res/.*\.sequence$">
  429: SetHandler perl-script
  430: PerlHandler Apache::lonsequence
  431: </LocationMatch>
  432: 
  433: <LocationMatch "^/+(res|priv|public|uploaded|editupload|adm)/.*\.meta$">
  434: PerlAccessHandler      Apache::publiccheck
  435: SetHandler perl-script
  436: PerlHandler Apache::lonmeta
  437: ErrorDocument     413 /adm/overloaded.txt
  438: </LocationMatch>
  439: 
  440: <LocationMatch "^/adm/bombs/">
  441: AuthType LONCAPA
  442: Require valid-user
  443: PerlAuthzHandler Apache::lonacc
  444: SetHandler perl-script
  445: PerlHandler Apache::lonmeta
  446: </LocationMatch>
  447: 
  448: 
  449: 
  450: <LocationMatch "^/+(res|priv)/.*\.rights$">
  451: SetHandler perl-script
  452: PerlHandler Apache::lonrights
  453: </LocationMatch>
  454: 
  455: <LocationMatch "^/+(uploaded|res|priv)/.*\.(xml|html|htm|xhtml|xhtm|sty)$">
  456: SetHandler perl-script
  457: PerlHandler Apache::londatecheck
  458: PerlHandler Apache::lonipcheck
  459: PerlHandler Apache::lonxml
  460: </LocationMatch>
  461: 
  462: <LocationMatch "^/+(res|priv).*\.(task|problem|exam|quiz|assess|survey|form|library)$">
  463: SetHandler perl-script
  464: PerlHandler Apache::lonhomework
  465: </LocationMatch>
  466: 
  467: <LocationMatch "^/+priv/.*\.(js|css|txt|tex)$">
  468: SetHandler perl-script
  469: PerlHandler Apache::lonxml
  470: </LocationMatch>
  471: 
  472: <LocationMatch "^/daxepage/priv/">
  473: AuthType LONCAPA
  474: Require valid-user
  475: PerlAuthzHandler       Apache::loncacc
  476: ErrorDocument     403 /adm/login
  477: ErrorDocument     404 /adm/notfound.html
  478: ErrorDocument     406 /adm/unauthorized
  479: ErrorDocument     500 /adm/errorhandler
  480: </LocationMatch>
  481: 
  482: <LocationMatch "^/daxeopen/">
  483: AuthType LONCAPA
  484: Require valid-user
  485: PerlAuthzHandler       Apache::lonacc
  486: </LocationMatch>
  487: 
  488: <LocationMatch "^/daxe(page|open)/uploaded/">
  489: AuthType LONCAPA
  490: Require valid-user
  491: PerlAuthzHandler       Apache::lonacc
  492: ErrorDocument     403 /adm/login
  493: ErrorDocument     404 /adm/notfound.html
  494: ErrorDocument     406 /adm/unauthorized
  495: ErrorDocument     500 /adm/errorhandler
  496: </LocationMatch>
  497: 
  498: <LocationMatch "^/daxepage/priv/.*\.(task|problem|exam|quiz|assess|survey|library|xml|html|htm|xhtml|xhtm)$">
  499: SetHandler perl-script
  500: PerlHandler Apache::daxepage
  501: </LocationMatch>
  502: 
  503: <LocationMatch "^/daxepage/uploaded/[^/]+/[^/]+/.*html?$">
  504: SetHandler perl-script
  505: PerlHandler Apache::daxepage
  506: </LocationMatch>
  507: 
  508: <LocationMatch "^/daxeopen/priv/.*\.(task|problem|exam|quiz|assess|survey|library|xml|html|htm|xhtml|xhtm)$">
  509: SetHandler perl-script
  510: PerlHandler Apache::daxeopen
  511: </LocationMatch>
  512: 
  513: <LocationMatch "^/daxeopen/$">
  514: SetHandler perl-script
  515: PerlHandler Apache::daxeopen
  516: </LocationMatch>
  517: 
  518: <LocationMatch "^/daxeopen/(res|priv)/(.+/)?$">
  519: SetHandler perl-script
  520: PerlHandler Apache::daxeopen
  521: </LocationMatch>
  522: 
  523: <LocationMatch "^/daxeopen/uploaded/[^/]+/[^/]+/.*html?$">
  524: SetHandler perl-script
  525: PerlHandler Apache::daxeopen
  526: </LocationMatch>
  527: 
  528: <LocationMatch "(?i)^/daxeopen/priv/.+\.(?!task$|problem$|exam$|quiz$|assess$|survey$|library$|xml$|html$|htm$|xhtml$|xhtm$)[^.]*$">
  529: <IfModule mod_rewrite.c>
  530:   RewriteEngine on
  531:   RewriteRule /daxeopen/(.*) /$1
  532: </IfModule>
  533: </LocationMatch>
  534: 
  535: <LocationMatch "(?i)^/daxeopen/(res/.*\.(jpg|jpeg|gif|png|svg))$">
  536: <IfModule mod_rewrite.c>
  537:   RewriteEngine on
  538:   RewriteRule /daxeopen/(.*) /$1
  539: </IfModule>
  540: </LocationMatch>
  541: 
  542: <LocationMatch "^/daxesave$">
  543: AuthType LONCAPA
  544: Require valid-user
  545: PerlAuthzHandler       Apache::lonacc
  546: SetHandler perl-script
  547: PerlHandler Apache::daxesave
  548: </LocationMatch>
  549: 
  550: <Location /adm/coursepub>
  551: AuthType LONCAPA
  552: Require valid-user
  553: PerlAuthzHandler Apache::lonacc
  554: SetHandler perl-script
  555: PerlHandler Apache::loncoursepub
  556: ErrorDocument     404 /adm/notfound.html
  557: ErrorDocument     500 /adm/errorhandler
  558: </Location>
  559: 
  560: <LocationMatch "^/adm/wrapper/">
  561: AuthType LONCAPA
  562: Require valid-user
  563: PerlAuthzHandler       Apache::lonacc
  564: PerlHandler Apache::londatecheck
  565: PerlHandler Apache::lonipcheck
  566: SetHandler perl-script
  567: PerlHandler Apache::lonwrapper
  568: ErrorDocument     403 /adm/login
  569: ErrorDocument	  500 /adm/errorhandler
  570: </LocationMatch>
  571: 
  572: <LocationMatch "^/adm/source">
  573: AuthType LONCAPA
  574: Require valid-user
  575: PerlAuthzHandler       Apache::lonacc
  576: SetHandler perl-script
  577: PerlHandler Apache::lonsource
  578: ErrorDocument     403 /adm/login
  579: ErrorDocument     406 /adm/roles
  580: ErrorDocument	  500 /adm/errorhandler
  581: </LocationMatch>
  582: 
  583: 
  584: <LocationMatch "^/adm/localize/">
  585: AuthType LONCAPA
  586: Require valid-user
  587: PerlAuthzHandler       Apache::lonacc
  588: SetHandler perl-script
  589: PerlHandler Apache::lonlocalize
  590: ErrorDocument     403 /adm/login
  591: ErrorDocument	  500 /adm/errorhandler
  592: </LocationMatch>
  593: 
  594: # -------------------------------------------------------------- Admin Programs
  595: 
  596: <Location /adm/randomlabel.png>
  597: AuthType LONCAPA
  598: Require valid-user
  599: PerlAuthzHandler       Apache::lonacc
  600: SetHandler perl-script
  601: PerlHandler Apache::randomlylabel
  602: ErrorDocument     403 /adm/login
  603: ErrorDocument	  500 /adm/errorhandler
  604: </Location>
  605: 
  606: <Location /adm/imagechoice>
  607: AuthType LONCAPA
  608: Require valid-user
  609: PerlAuthzHandler       Apache::lonacc
  610: SetHandler perl-script
  611: PerlHandler Apache::imagechoice
  612: ErrorDocument     403 /adm/login
  613: ErrorDocument	  500 /adm/errorhandler
  614: </Location>
  615: 
  616: <Location /adm/searchcourse>
  617: AuthType LONCAPA
  618: Require valid-user
  619: PerlAuthzHandler       Apache::lonacc
  620: SetHandler perl-script
  621: PerlHandler Apache::lonsearchcourse
  622: ErrorDocument     403 /adm/login
  623: ErrorDocument     500 /adm/errorhandler
  624: </Location>
  625: 
  626: <Location /adm/indexcourse>
  627: AuthType LONCAPA
  628: Require valid-user
  629: PerlAuthzHandler       Apache::lonacc
  630: SetHandler perl-script
  631: PerlHandler Apache::lonindexcourse
  632: ErrorDocument     403 /adm/login
  633: ErrorDocument     500 /adm/errorhandler
  634: </Location>
  635: 
  636: <Location /adm/statistics>
  637: AuthType LONCAPA
  638: Require valid-user
  639: PerlAuthzHandler       Apache::lonacc
  640: SetHandler perl-script
  641: PerlHandler Apache::lonstatistics
  642: ErrorDocument     403 /adm/login
  643: ErrorDocument     413 /adm/overloaded.txt
  644: ErrorDocument	  500 /adm/errorhandler
  645: </Location>
  646: 
  647: <Location /adm/trackstudent>
  648: AuthType LONCAPA
  649: Require valid-user
  650: PerlAuthzHandler       Apache::lonacc
  651: SetHandler perl-script
  652: PerlHandler Apache::lontrackstudent
  653: ErrorDocument     403 /adm/login
  654: ErrorDocument     413 /adm/overloaded.txt
  655: ErrorDocument	  500 /adm/errorhandler
  656: </Location>
  657: 
  658: <Location /adm/roles>
  659: AuthType LONCAPA
  660: Require valid-user
  661: PerlAuthzHandler       Apache::lonacc
  662: SetHandler perl-script
  663: PerlHandler Apache::lonroles
  664: ErrorDocument     403 /adm/login
  665: ErrorDocument     409 /adm/preferences?action=lockwarning
  666: ErrorDocument	  500 /adm/errorhandler
  667: </Location>
  668: 
  669: <Location /adm/menu>
  670: AuthType LONCAPA
  671: Require valid-user
  672: PerlAuthzHandler       Apache::lonacc
  673: SetHandler perl-script
  674: PerlHandler Apache::lonmainmenu
  675: ErrorDocument     403 /adm/login
  676: ErrorDocument	  500 /adm/errorhandler
  677: </Location>
  678: 
  679: <Location /adm/pickresource>
  680: AuthType LONCAPA
  681: Require valid-user
  682: PerlAuthzHandler       Apache::lonacc
  683: SetHandler perl-script
  684: PerlHandler Apache::lonpickresource
  685: ErrorDocument     403 /adm/login
  686: ErrorDocument     500 /adm/errorhandler
  687: </Location>
  688: 
  689: <Location /adm/pickauthor>
  690: AuthType LONCAPA
  691: Require valid-user
  692: PerlAuthzHandler       Apache::lonacc
  693: SetHandler perl-script
  694: PerlHandler Apache::lonpickauthor
  695: ErrorDocument     403 /adm/login
  696: ErrorDocument     500 /adm/errorhandler
  697: </Location>
  698: 
  699: <Location /adm/pickstudent>
  700: AuthType LONCAPA
  701: Require valid-user
  702: PerlAuthzHandler       Apache::lonacc
  703: SetHandler perl-script
  704: PerlHandler Apache::lonpickstudent
  705: ErrorDocument     403 /adm/login
  706: ErrorDocument	  500 /adm/errorhandler
  707: </Location>
  708: 
  709: <Location /adm/pickuser>
  710: AuthType LONCAPA
  711: Require valid-user
  712: PerlAuthzHandler       Apache::lonacc
  713: SetHandler perl-script
  714: PerlHandler Apache::lonpickuser
  715: ErrorDocument     403 /adm/login
  716: ErrorDocument     406 /adm/roles
  717: ErrorDocument     500 /adm/errorhandler
  718: </Location>
  719: 
  720: <Location /adm/pickcourse>
  721: AuthType LONCAPA
  722: Require valid-user
  723: PerlAuthzHandler       Apache::lonacc
  724: SetHandler perl-script
  725: PerlHandler Apache::lonpickcourse
  726: ErrorDocument     403 /adm/login
  727: ErrorDocument	  500 /adm/errorhandler
  728: </Location>
  729: 
  730: <Location /adm/pickcode>
  731: AuthType LONCAPA
  732: Require valid-user
  733: PerlAuthzHandler       Apache::lonacc
  734: SetHandler perl-script
  735: PerlHandler Apache::lonpickcode
  736: ErrorDocument     403 /adm/login
  737: ErrorDocument	  500 /adm/errorhandler
  738: </Location>
  739: 
  740: <Location /adm/dependencies>
  741: AuthType LONCAPA
  742: Require valid-user
  743: PerlAuthzHandler       Apache::lonacc
  744: SetHandler perl-script
  745: PerlHandler Apache::londependencies
  746: ErrorDocument     403 /adm/login
  747: ErrorDocument     406 /adm/roles
  748: ErrorDocument     500 /adm/errorhandler
  749: </Location>
  750: 
  751: <Location /adm/login>
  752: SetHandler perl-script
  753: PerlHandler Apache::lonlogin
  754: </Location>
  755: 
  756: <LocationMatch "^/+adm/lti($|/)">
  757: SetHandler perl-script
  758: PerlHandler Apache::ltiauth
  759: </LocationMatch>
  760: 
  761: <Location /adm/service/passback>
  762: SetHandler perl-script
  763: PerlHandler Apache::ltipassback
  764: </Location>
  765: 
  766: <Location /adm/service/roster>
  767: SetHandler perl-script
  768: PerlHandler Apache::ltiroster
  769: </Location>
  770: 
  771: <Location /adm/restrictedaccess>
  772: PerlAccessHandler      Apache::publiccheck
  773: AuthType LONCAPA
  774: Require valid-user
  775: PerlAuthzHandler       Apache::lonacc
  776: SetHandler perl-script
  777: PerlHandler Apache::restrictedaccess
  778: ErrorDocument	  500 /adm/errorhandler
  779: </Location>
  780: 
  781: <Location /adm/blockedaccess>
  782: PerlAccessHandler      Apache::publiccheck
  783: AuthType LONCAPA
  784: Require valid-user
  785: PerlAuthzHandler       Apache::lonacc
  786: SetHandler perl-script
  787: PerlHandler Apache::blockedaccess
  788: ErrorDocument     500 /adm/errorhandler
  789: </Location>
  790: 
  791: <Location /adm/protected>
  792: PerlAccessHandler      Apache::publiccheck
  793: AuthType LONCAPA
  794: Require valid-user
  795: PerlAuthzHandler       Apache::lonacc
  796: SetHandler perl-script
  797: PerlHandler Apache::lonprotected
  798: ErrorDocument     403 /adm/login
  799: ErrorDocument     500 /adm/errorhandler
  800: </Location>
  801: 
  802: <Location /adm/logout>
  803: AuthType LONCAPA
  804: Require valid-user
  805: PerlAuthzHandler       Apache::lonacc
  806: SetHandler perl-script
  807: PerlHandler Apache::lonlogout
  808: ErrorDocument     403 /adm/login
  809: ErrorDocument     409 /adm/preferences?action=lockwarning
  810: ErrorDocument	  500 /adm/errorhandler
  811: </Location>
  812: 
  813: <Location /adm/switchserver>
  814: AuthType LONCAPA
  815: Require valid-user
  816: PerlAuthzHandler       Apache::lonacc
  817: SetHandler perl-script
  818: PerlHandler Apache::switchserver
  819: ErrorDocument     403 /adm/login
  820: ErrorDocument	  500 /adm/errorhandler
  821: </Location>
  822: 
  823: <Location /adm/authenticate>
  824: SetHandler perl-script
  825: PerlHandler Apache::lonauth
  826: </Location>
  827: 
  828: <Location /adm/migrateuser>
  829: SetHandler perl-script
  830: PerlHandler Apache::migrateuser
  831: </Location>
  832: 
  833: <Location /adm/sso>
  834:   <IfModule mod_shib>
  835:     AuthType shibboleth
  836:     ShibUseEnvironment On
  837:     ShibRequestSetting requireSession 1
  838:     ShibRequestSetting redirectToSSL 443
  839:     require valid-user
  840:     PerlAuthzHandler       Apache::lonshibacc
  841:     PerlAuthzHandler       Apache::lonacc
  842:   </IfModule>
  843:   <IfModule !mod_shib>
  844:     PerlTypeHandler        Apache::lonnoshib
  845:   </IfModule>
  846: </Location>
  847: 
  848: <Location /adm/annotations>
  849: AuthType LONCAPA
  850: Require valid-user
  851: PerlAuthzHandler       Apache::lonacc
  852: SetHandler perl-script
  853: PerlHandler Apache::admannotations
  854: ErrorDocument     403 /adm/login
  855: ErrorDocument	  500 /adm/errorhandler
  856: </Location>
  857: 
  858: <Location /adm/annotation>
  859: AuthType LONCAPA
  860: Require valid-user
  861: PerlAuthzHandler       Apache::lonacc
  862: SetHandler perl-script
  863: PerlHandler Apache::admannotations
  864: ErrorDocument     403 /adm/login
  865: ErrorDocument     500 /adm/errorhandler
  866: </Location>
  867: 
  868: <Location /adm/spellcheck>
  869: AuthType LONCAPA
  870: Require valid-user
  871: PerlAuthzHandler       Apache::lonacc
  872: SetHandler perl-script
  873: PerlHandler Apache::lonspeller
  874: ErrorDocument     403 /adm/login
  875: ErrorDocument	  500 /adm/errorhandler
  876: </Location>
  877: 
  878: <Location /adm/flip>
  879: AuthType LONCAPA
  880: Require valid-user
  881: PerlAuthzHandler       Apache::lonacc
  882: SetHandler perl-script
  883: PerlHandler Apache::lonpageflip
  884: PerlCleanupHandler Apache::lonpageflip::cleanup
  885: PerlCleanupHandler	Apache::lonacc::cleanup
  886: ErrorDocument     406 /adm/roles
  887: ErrorDocument     403 /adm/login
  888: ErrorDocument	  500 /adm/errorhandler
  889: </Location>
  890: 
  891: <Location /adm/ambiguous>
  892: AuthType LONCAPA
  893: Require valid-user
  894: PerlAuthzHandler       Apache::lonacc
  895: SetHandler perl-script
  896: PerlHandler Apache::lonambiguous
  897: PerlCleanupHandler Apache::lonambiguous::cleanup
  898: PerlCleanupHandler	Apache::lonacc::cleanup
  899: ErrorDocument     403 /adm/login
  900: ErrorDocument	  500 /adm/errorhandler
  901: </Location>
  902: 
  903: <Location /adm/email>
  904: AuthType LONCAPA
  905: Require valid-user
  906: PerlAuthzHandler       Apache::lonacc
  907: SetHandler perl-script
  908: PerlHandler Apache::lonmsgdisplay
  909: ErrorDocument     403 /adm/login
  910: ErrorDocument	  500 /adm/errorhandler
  911: </Location>
  912: 
  913: <Location /adm/notify>
  914: AuthType LONCAPA
  915: Require valid-user
  916: PerlAuthzHandler       Apache::lonacc
  917: SetHandler perl-script
  918: PerlHandler Apache::lonnotify
  919: ErrorDocument     403 /adm/login
  920: ErrorDocument     500 /adm/errorhandler
  921: </Location>
  922: 
  923: <Location /adm/parmset>
  924: AuthType LONCAPA
  925: Require valid-user
  926: PerlAuthzHandler       Apache::lonacc
  927: SetHandler perl-script
  928: PerlHandler Apache::lonparmset
  929: ErrorDocument     403 /adm/login
  930: ErrorDocument     406 /adm/roles
  931: ErrorDocument	  500 /adm/errorhandler
  932: </Location>
  933: 
  934: <Location /adm/courseprefs>
  935: AuthType LONCAPA
  936: Require valid-user
  937: PerlAuthzHandler       Apache::lonacc
  938: SetHandler perl-script
  939: PerlHandler Apache::courseprefs
  940: ErrorDocument     403 /adm/login
  941: ErrorDocument     406 /adm/roles
  942: ErrorDocument     500 /adm/errorhandler
  943: </Location>
  944: 
  945: <Location /adm/slotrequest>
  946: AuthType LONCAPA
  947: Require valid-user
  948: PerlAuthzHandler       Apache::lonacc
  949: SetHandler perl-script
  950: PerlHandler Apache::slotrequest
  951: ErrorDocument     403 /adm/login
  952: ErrorDocument     406 /adm/roles
  953: ErrorDocument	  500 /adm/errorhandler
  954: </Location>
  955: 
  956: <Location /adm/wizard>
  957: AuthType LONCAPA
  958: Require valid-user
  959: PerlAuthzHandler       Apache::lonacc
  960: SetHandler perl-script
  961: PerlHandler Apache::lonwizard
  962: ErrorDocument     403 /adm/login
  963: ErrorDocument     406 /adm/roles
  964: ErrorDocument	  500 /adm/errorhandler
  965: </Location>
  966: 
  967: <Location /adm/grades>
  968: AuthType LONCAPA
  969: Require valid-user
  970: PerlAuthzHandler       Apache::lonacc
  971: SetHandler perl-script
  972: PerlHandler Apache::grades
  973: ErrorDocument     403 /adm/login
  974: ErrorDocument     406 /adm/roles
  975: ErrorDocument	  500 /adm/errorhandler
  976: </Location>
  977: 
  978: <Location /adm/requestcourse>
  979: AuthType LONCAPA
  980: Require valid-user
  981: PerlAuthzHandler       Apache::lonacc
  982: SetHandler perl-script
  983: PerlHandler Apache::lonrequestcourse
  984: ErrorDocument     403 /adm/login
  985: ErrorDocument     406 /adm/roles
  986: ErrorDocument     500 /adm/errorhandler
  987: </Location>
  988: 
  989: <Location /adm/createcourse>
  990: AuthType LONCAPA
  991: Require valid-user
  992: PerlAuthzHandler       Apache::lonacc
  993: SetHandler perl-script
  994: PerlHandler Apache::loncreatecourse
  995: ErrorDocument     403 /adm/login
  996: ErrorDocument     406 /adm/roles
  997: ErrorDocument	  500 /adm/errorhandler
  998: </Location>
  999: 
 1000: <Location /adm/modifycourse>
 1001: AuthType LONCAPA
 1002: Require valid-user
 1003: PerlAuthzHandler       Apache::lonacc
 1004: SetHandler perl-script
 1005: PerlHandler Apache::lonmodifycourse
 1006: ErrorDocument     403 /adm/login
 1007: ErrorDocument     406 /adm/roles
 1008: ErrorDocument     500 /adm/errorhandler
 1009: </Location>
 1010: 
 1011: <Location /adm/domainprefs>
 1012: AuthType LONCAPA
 1013: Require valid-user
 1014: PerlAuthzHandler       Apache::lonacc
 1015: SetHandler perl-script
 1016: PerlHandler Apache::domainprefs
 1017: ErrorDocument     403 /adm/login
 1018: ErrorDocument     406 /adm/roles
 1019: ErrorDocument     500 /adm/errorhandler
 1020: </Location>
 1021: 
 1022: <Location /adm/domainstatus>
 1023: PerlAccessHandler       Apache::lonstatusacc
 1024: SetHandler perl-script
 1025: PerlHandler Apache::domainstatus
 1026: ErrorDocument     403 /adm/login
 1027: ErrorDocument     406 /adm/roles
 1028: ErrorDocument     500 /adm/errorhandler
 1029: </Location>
 1030: 
 1031: <Location /adm/createuser>
 1032: AuthType LONCAPA
 1033: Require valid-user
 1034: PerlAuthzHandler       Apache::lonacc
 1035: SetHandler perl-script
 1036: PerlHandler Apache::loncreateuser
 1037: ErrorDocument     403 /adm/login
 1038: ErrorDocument     406 /adm/roles
 1039: ErrorDocument	  500 /adm/errorhandler
 1040: </Location>
 1041: 
 1042: <Location /adm/publish>
 1043: AuthType LONCAPA
 1044: Require valid-user
 1045: PerlAuthzHandler       Apache::lonacc
 1046: SetHandler perl-script
 1047: PerlHandler Apache::lonpublisher
 1048: ErrorDocument     403 /adm/login
 1049: ErrorDocument     404 /adm/notfound.html
 1050: ErrorDocument     406 /adm/unauthorized
 1051: ErrorDocument	  500 /adm/errorhandler
 1052: </Location>
 1053: 
 1054: <LocationMatch "^/+priv/.*/$">
 1055: AuthType LONCAPA
 1056: Require valid-user
 1057: PerlAuthzHandler       Apache::loncacc
 1058: SetHandler perl-script
 1059: PerlHandler Apache::lonpubdir
 1060: ErrorDocument     403 /adm/login
 1061: ErrorDocument     404 /adm/notfound.html
 1062: ErrorDocument     406 /adm/unauthorized
 1063: ErrorDocument	  500 /adm/errorhandler
 1064: </LocationMatch>
 1065: 
 1066: <Location /adm/unauthorized>
 1067: AuthType LONCAPA
 1068: Require valid-user
 1069: PerlAuthzHandler       Apache::lonacc
 1070: SetHandler perl-script
 1071: PerlHandler Apache::lonunauthorized
 1072: ErrorDocument     403 /adm/login
 1073: ErrorDocument     404 /adm/notfound.html
 1074: ErrorDocument	  500 /adm/errorhandler
 1075: </Location>
 1076: 
 1077: <Location /adm/retrieve>
 1078: AuthType LONCAPA
 1079: Require valid-user
 1080: PerlAuthzHandler       Apache::lonacc
 1081: SetHandler perl-script
 1082: PerlHandler Apache::lonretrieve
 1083: ErrorDocument     403 /adm/login
 1084: ErrorDocument     404 /adm/notfound.html
 1085: ErrorDocument     406 /adm/unauthorized
 1086: ErrorDocument	  500 /adm/errorhandler
 1087: </Location>
 1088: 
 1089: <Location /adm/cleanup>
 1090: AuthType LONCAPA
 1091: Require valid-user
 1092: PerlAuthzHandler       Apache::lonacc
 1093: SetHandler perl-script
 1094: PerlHandler Apache::loncleanup
 1095: ErrorDocument     403 /adm/login
 1096: ErrorDocument     404 /adm/notfound.html
 1097: ErrorDocument     406 /adm/unauthorized
 1098: ErrorDocument	  500 /adm/errorhandler
 1099: </Location>
 1100: 
 1101: <Location /adm/cfile>
 1102: AuthType LONCAPA
 1103: Require valid-user
 1104: PerlAuthzHandler       Apache::lonacc
 1105: SetHandler perl-script
 1106: PerlHandler Apache::loncfile
 1107: ErrorDocument     403 /adm/login
 1108: ErrorDocument     404 /adm/notfound.html
 1109: ErrorDocument     406 /adm/unauthorized
 1110: ErrorDocument	  500 /adm/errorhandler
 1111: </Location>
 1112: 
 1113: <Location /adm/diff>
 1114: AuthType LONCAPA
 1115: Require valid-user
 1116: PerlAuthzHandler       Apache::lonacc
 1117: SetHandler perl-script
 1118: PerlHandler Apache::londiff
 1119: ErrorDocument     403 /adm/login
 1120: ErrorDocument     404 /adm/notfound.html
 1121: ErrorDocument     406 /adm/unauthorized
 1122: ErrorDocument	  500 /adm/errorhandler
 1123: </Location>
 1124: 
 1125: <Location /adm/upload>
 1126: AuthType LONCAPA
 1127: Require valid-user
 1128: PerlAuthzHandler       Apache::lonacc
 1129: SetHandler perl-script
 1130: PerlHandler Apache::lonupload
 1131: ErrorDocument     403 /adm/login
 1132: ErrorDocument     404 /adm/notfound.html
 1133: ErrorDocument     406 /adm/unauthorized
 1134: ErrorDocument	  500 /adm/errorhandler
 1135: </Location>
 1136: 
 1137: <Location /adm/imsimport>
 1138: AuthType LONCAPA
 1139: Require valid-user
 1140: PerlAuthzHandler       Apache::lonacc
 1141: SetHandler perl-script
 1142: PerlHandler Apache::imsimport
 1143: ErrorDocument     403 /adm/login
 1144: ErrorDocument     404 /adm/notfound.html
 1145: ErrorDocument     406 /adm/unauthorized
 1146: ErrorDocument     500 /adm/errorhandler
 1147: </Location>
 1148: 
 1149: <Location /adm/testbank>
 1150: AuthType LONCAPA
 1151: Require valid-user
 1152: PerlAuthzHandler       Apache::lonacc
 1153: SetHandler perl-script
 1154: PerlHandler Apache::testbankimport
 1155: ErrorDocument     403 /adm/login
 1156: ErrorDocument     404 /adm/notfound.html
 1157: ErrorDocument     406 /adm/unauthorized
 1158: ErrorDocument     500 /adm/errorhandler
 1159: </Location>
 1160: 
 1161: <Location /adm/assesscalc>
 1162: AuthType LONCAPA
 1163: Require valid-user
 1164: PerlAuthzHandler       Apache::lonacc
 1165: SetHandler perl-script
 1166: PerlHandler Apache::lonspreadsheet
 1167: ErrorDocument     403 /adm/login
 1168: ErrorDocument     406 /adm/roles
 1169: ErrorDocument     413 /adm/overloaded.txt
 1170: ErrorDocument	  500 /adm/errorhandler
 1171: </Location>
 1172: 
 1173: <Location /adm/studentcalc>
 1174: AuthType LONCAPA
 1175: Require valid-user
 1176: PerlAuthzHandler       Apache::lonacc
 1177: SetHandler perl-script
 1178: PerlHandler Apache::lonspreadsheet
 1179: ErrorDocument     403 /adm/login
 1180: ErrorDocument     406 /adm/roles
 1181: ErrorDocument     413 /adm/overloaded.txt
 1182: ErrorDocument	  500 /adm/errorhandler
 1183: </Location>
 1184: 
 1185: <Location /adm/classcalc>
 1186: AuthType LONCAPA
 1187: Require valid-user
 1188: PerlAuthzHandler       Apache::lonacc
 1189: SetHandler perl-script
 1190: PerlHandler Apache::lonspreadsheet
 1191: ErrorDocument     403 /adm/login
 1192: ErrorDocument     406 /adm/roles
 1193: ErrorDocument     413 /adm/overloaded.txt
 1194: ErrorDocument	  500 /adm/errorhandler
 1195: </Location>
 1196: 
 1197: <Location /adm/dropadd>
 1198: AuthType LONCAPA
 1199: Require valid-user
 1200: PerlAuthzHandler       Apache::lonacc
 1201: SetHandler perl-script
 1202: PerlHandler Apache::londropadd
 1203: ErrorDocument     403 /adm/login
 1204: ErrorDocument     406 /adm/roles
 1205: ErrorDocument	  500 /adm/errorhandler
 1206: </Location>
 1207: 
 1208: <Location /adm/viewclasslist>
 1209: AuthType LONCAPA
 1210: Require valid-user
 1211: PerlAuthzHandler       Apache::lonacc
 1212: SetHandler perl-script
 1213: PerlHandler Apache::lonviewclasslist
 1214: ErrorDocument     403 /adm/login
 1215: ErrorDocument     406 /adm/roles
 1216: ErrorDocument	  500 /adm/errorhandler
 1217: </Location>
 1218: 
 1219: <Location /adm/coursegroups>
 1220: AuthType LONCAPA
 1221: Require valid-user
 1222: PerlAuthzHandler       Apache::lonacc
 1223: SetHandler perl-script
 1224: PerlHandler Apache::loncoursegroups
 1225: ErrorDocument     403 /adm/login
 1226: ErrorDocument     406 /adm/roles
 1227: ErrorDocument     500 /adm/errorhandler
 1228: </Location>
 1229: 
 1230: <Location /adm/groupboards>
 1231: AuthType LONCAPA
 1232: Require valid-user
 1233: PerlAuthzHandler       Apache::lonacc
 1234: SetHandler perl-script
 1235: PerlHandler Apache::groupboards
 1236: ErrorDocument     403 /adm/login
 1237: ErrorDocument     406 /adm/roles
 1238: ErrorDocument     500 /adm/errorhandler
 1239: </Location>
 1240: 
 1241: <Location /adm/grouproster>
 1242: AuthType LONCAPA
 1243: Require valid-user
 1244: PerlAuthzHandler       Apache::lonacc
 1245: SetHandler perl-script
 1246: PerlHandler Apache::grouproster
 1247: ErrorDocument     403 /adm/login
 1248: ErrorDocument     406 /adm/roles
 1249: ErrorDocument     500 /adm/errorhandler
 1250: </Location>
 1251: 
 1252: <Location /adm/whatsnew>
 1253: AuthType LONCAPA
 1254: Require valid-user
 1255: PerlAuthzHandler       Apache::lonacc
 1256: SetHandler perl-script
 1257: PerlHandler Apache::lonwhatsnew
 1258: ErrorDocument     403 /adm/login
 1259: ErrorDocument     406 /adm/roles
 1260: ErrorDocument     500 /adm/errorhandler
 1261: </Location>
 1262: 
 1263: <Location /adm/populate>
 1264: AuthType LONCAPA
 1265: Require valid-user
 1266: PerlAuthzHandler       Apache::lonacc
 1267: SetHandler perl-script
 1268: PerlHandler Apache::lonpopulate
 1269: ErrorDocument     403 /adm/login
 1270: ErrorDocument     406 /adm/roles
 1271: ErrorDocument     500 /adm/errorhandler
 1272: </Location>
 1273: 
 1274: <Location /adm/managekeys>
 1275: AuthType LONCAPA
 1276: Require valid-user
 1277: PerlAuthzHandler       Apache::lonacc
 1278: SetHandler perl-script
 1279: PerlHandler Apache::lonmanagekeys
 1280: ErrorDocument     403 /adm/login
 1281: ErrorDocument     406 /adm/roles
 1282: ErrorDocument	  500 /adm/errorhandler
 1283: </Location>
 1284: 
 1285: <Location /adm/printout>
 1286: AuthType LONCAPA
 1287: Require valid-user
 1288: PerlAuthzHandler       Apache::lonacc
 1289: SetHandler perl-script
 1290: PerlHandler Apache::lonprintout
 1291: ErrorDocument     403 /adm/login
 1292: ErrorDocument     413 /adm/overloaded.txt
 1293: ErrorDocument	  500 /adm/errorhandler
 1294: </Location>
 1295: 
 1296: <Location /adm/feedback>
 1297: AuthType LONCAPA
 1298: Require valid-user
 1299: PerlAuthzHandler       Apache::lonacc
 1300: SetHandler perl-script
 1301: PerlHandler Apache::lonfeedback
 1302: ErrorDocument     403 /adm/login
 1303: ErrorDocument	  500 /adm/errorhandler
 1304: </Location>
 1305: 
 1306: <Location /adm/coursedocs>
 1307: AuthType LONCAPA
 1308: Require valid-user
 1309: PerlAuthzHandler       Apache::lonacc
 1310: SetHandler perl-script
 1311: PerlHandler Apache::londocs
 1312: PerlCleanupHandler Apache::londocs::untiehash
 1313: PerlCleanupHandler	Apache::lonacc::cleanup
 1314: ErrorDocument     403 /adm/login
 1315: ErrorDocument	  500 /adm/errorhandler
 1316: </Location>
 1317: 
 1318: <Location /adm/supplemental>
 1319: AuthType LONCAPA
 1320: Require valid-user
 1321: PerlAuthzHandler       Apache::lonacc
 1322: SetHandler perl-script
 1323: PerlHandler Apache::londocs
 1324: PerlCleanupHandler Apache::londocs::untiehash
 1325: PerlCleanupHandler      Apache::lonacc::cleanup
 1326: ErrorDocument     403 /adm/login
 1327: ErrorDocument     500 /adm/errorhandler
 1328: </Location>
 1329: 
 1330: <Location /adm/imsimportdocs>
 1331: AuthType LONCAPA
 1332: Require valid-user
 1333: PerlAuthzHandler       Apache::lonacc
 1334: SetHandler perl-script
 1335: PerlHandler Apache::imsimportdocs
 1336: ErrorDocument     403 /adm/login
 1337: ErrorDocument     500 /adm/errorhandler
 1338: </Location>
 1339: 
 1340: <Location /adm/extresedit>
 1341: AuthType LONCAPA
 1342: Require valid-user
 1343: PerlAuthzHandler       Apache::lonacc
 1344: SetHandler perl-script
 1345: PerlHandler Apache::lonextresedit
 1346: ErrorDocument     403 /adm/login
 1347: ErrorDocument     500 /adm/errorhandler
 1348: </Location>
 1349: 
 1350: <LocationMatch "^/adm/announcements">
 1351: AuthType LONCAPA
 1352: Require valid-user
 1353: PerlAuthzHandler       Apache::lonacc
 1354: SetHandler perl-script
 1355: PerlHandler Apache::lonannounce
 1356: ErrorDocument     403 /adm/login
 1357: ErrorDocument	  500 /adm/errorhandler
 1358: </LocationMatch>
 1359: 
 1360: <Location /adm/chat>
 1361: AuthType LONCAPA
 1362: Require valid-user
 1363: PerlAuthzHandler       Apache::lonacc
 1364: SetHandler perl-script
 1365: PerlHandler Apache::lonchat
 1366: ErrorDocument	  500 /adm/errorhandler
 1367: </Location>
 1368: 
 1369: <Location /adm/chatfetch>
 1370: AuthType LONCAPA
 1371: Require valid-user
 1372: PerlAuthzHandler       Apache::lonacc
 1373: SetHandler perl-script
 1374: PerlHandler Apache::lonchatfetch
 1375: ErrorDocument     413 /adm/overloaded.txt
 1376: ErrorDocument	  500 /adm/errorhandler
 1377: </Location>
 1378: 
 1379: <Location /adm/groupchat>
 1380: AuthType LONCAPA
 1381: Require valid-user
 1382: PerlAuthzHandler       Apache::lonacc
 1383: SetHandler perl-script
 1384: PerlHandler Apache::longroupchat
 1385: ErrorDocument     403 /adm/login
 1386: ErrorDocument     500 /adm/errorhandler
 1387: </Location>
 1388: 
 1389: <Location /adm/evaluate>
 1390: AuthType LONCAPA
 1391: Require valid-user
 1392: PerlAuthzHandler       Apache::lonacc
 1393: SetHandler perl-script
 1394: PerlHandler Apache::lonevaluate
 1395: ErrorDocument     403 /adm/login
 1396: ErrorDocument	  500 /adm/errorhandler
 1397: </Location>
 1398: 
 1399: <Location /adm/preferences>
 1400: AuthType LONCAPA
 1401: Require valid-user
 1402: PerlAuthzHandler       Apache::lonacc
 1403: SetHandler perl-script
 1404: PerlHandler Apache::lonpreferences
 1405: ErrorDocument     403 /adm/login
 1406: ErrorDocument	  500 /adm/errorhandler
 1407: </Location>
 1408: 
 1409: <Location /adm/communicate>
 1410: AuthType LONCAPA
 1411: Require valid-user
 1412: PerlAuthzHandler       Apache::lonacc
 1413: SetHandler perl-script
 1414: PerlHandler Apache::loncommunicate
 1415: ErrorDocument     403 /adm/login
 1416: ErrorDocument	  500 /adm/errorhandler
 1417: </Location>
 1418: 
 1419: <Location /adm/searchcat>
 1420: AuthType LONCAPA
 1421: Require valid-user
 1422: PerlAuthzHandler       Apache::lonacc
 1423: SetHandler perl-script
 1424: PerlHandler Apache::lonsearchcat
 1425: PerlCleanupHandler Apache::lonsearchcat::cleanup
 1426: PerlCleanupHandler	Apache::lonacc::cleanup
 1427: ErrorDocument     403 /adm/login
 1428: ErrorDocument     413 /adm/overloaded.txt
 1429: ErrorDocument	  500 /adm/errorhandler
 1430: </Location>
 1431: 
 1432: <Location /adm/navmaps>
 1433: AuthType LONCAPA
 1434: Require valid-user
 1435: PerlAuthzHandler       Apache::lonacc
 1436: SetHandler perl-script
 1437: PerlHandler Apache::lonnavdisplay
 1438: ErrorDocument     403 /adm/login
 1439: ErrorDocument     406 /adm/roles
 1440: ErrorDocument	  500 /adm/errorhandler
 1441: </Location>
 1442: 
 1443: <Location /adm/quickgrades>
 1444: AuthType LONCAPA
 1445: Require valid-user
 1446: PerlAuthzHandler       Apache::lonacc
 1447: SetHandler perl-script
 1448: PerlHandler Apache::lonquickgrades
 1449: ErrorDocument     403 /adm/login
 1450: ErrorDocument     406 /adm/roles
 1451: ErrorDocument     500 /adm/errorhandler
 1452: </Location>
 1453: 
 1454: <Location /adm/groupsort>
 1455: AuthType LONCAPA
 1456: Require valid-user
 1457: PerlAuthzHandler	Apache::lonacc
 1458: SetHandler perl-script
 1459: PerlHandler Apache::groupsort
 1460: PerlCleanupHandler Apache::groupsort::cleanup
 1461: PerlCleanupHandler	Apache::lonacc::cleanup
 1462: ErrorDocument     403 /adm/login
 1463: ErrorDocument     406 /adm/roles
 1464: ErrorDocument	  500 /adm/errorhandler
 1465: </Location>
 1466: 
 1467: <Location /adm/wishlist>
 1468: AuthType LONCAPA
 1469: Require valid-user
 1470: PerlAuthzHandler       Apache::lonacc
 1471: SetHandler perl-script
 1472: PerlHandler Apache::lonwishlistdisplay
 1473: ErrorDocument     403 /adm/login
 1474: ErrorDocument     406 /adm/roles
 1475: ErrorDocument	  500 /adm/errorhandler
 1476: </Location>
 1477: 
 1478: <Location /adm/setblock>
 1479: AuthType LONCAPA
 1480: Require valid-user
 1481: PerlAuthzHandler       Apache::lonacc
 1482: SetHandler             perl-script
 1483: PerlHandler            Apache::lonblockingmenu
 1484: ErrorDocument     403 /adm/login
 1485: ErrorDocument     406 /adm/roles
 1486: ErrorDocument     500 /adm/errorhandler
 1487: </Location>
 1488: 
 1489: <Location /adm/blockingstatus>
 1490: PerlAccessHandler      Apache::publiccheck
 1491: AuthType LONCAPA
 1492: Require valid-user
 1493: PerlAuthzHandler       Apache::lonacc
 1494: SetHandler             perl-script
 1495: PerlHandler            Apache::lonblockingstatus
 1496: </Location>
 1497: 
 1498: <Location /adm/accesstimes>
 1499: AuthType LONCAPA
 1500: Require valid-user
 1501: PerlAuthzHandler       Apache::lonacc
 1502: SetHandler             perl-script
 1503: PerlHandler            Apache::lonaccesstimes
 1504: ErrorDocument     403 /adm/login
 1505: ErrorDocument     406 /adm/roles
 1506: ErrorDocument     500 /adm/errorhandler
 1507: </Location>
 1508: 
 1509: <Location /adm/errorhandler>
 1510: SetHandler perl-script
 1511: PerlHandler Apache::lonerrorhandler
 1512: </Location>
 1513: 
 1514: <LocationMatch "^/adm/help/.*\.hlp$">
 1515: AuthType LONCAPA
 1516: Require valid-user
 1517: PerlAccessHandler      Apache::publiccheck
 1518: PerlAuthzHandler	Apache::lonacc
 1519: SetHandler perl-script
 1520: PerlHandler Apache::lonhelp
 1521: ErrorDocument	  500 /adm/errorhandler
 1522: </LocationMatch>
 1523: 
 1524: <LocationMatch "^/adm/helpmenu">
 1525: AuthType LONCAPA
 1526: Require valid-user
 1527: PerlAuthzHandler       Apache::lonacc
 1528: SetHandler perl-script
 1529: PerlHandler Apache::lonhelpmenu
 1530: ErrorDocument	  500 /adm/errorhandler
 1531: </LocationMatch>
 1532: 
 1533: <LocationMatch "^/adm/support">
 1534: AuthType LONCAPA
 1535: Require valid-user
 1536: PerlAuthzHandler       Apache::lonacc
 1537: SetHandler perl-script
 1538: PerlHandler Apache::lonsupportreq
 1539: ErrorDocument	  500 /adm/errorhandler
 1540: </LocationMatch>
 1541: 
 1542: <LocationMatch "^/adm/helpdesk">
 1543: SetHandler perl-script
 1544: PerlHandler Apache::lonsupportreq
 1545: ErrorDocument	  500 /adm/errorhandler
 1546: </LocationMatch>
 1547: 
 1548: <LocationMatch "^/adm/css/.*\.css$">
 1549: SetHandler perl-script
 1550: PerlHandler Apache::loncss
 1551: ErrorDocument	  500 /adm/errorhandler
 1552: </LocationMatch>
 1553: 
 1554: <LocationMatch "^/adm/coursecatalog">
 1555: SetHandler perl-script
 1556: PerlHandler Apache::coursecatalog
 1557: ErrorDocument	  500 /adm/errorhandler
 1558: </LocationMatch>
 1559: 
 1560: <LocationMatch "^/adm/resetpw">
 1561: SetHandler perl-script
 1562: PerlHandler Apache::resetpw
 1563: ErrorDocument     500 /adm/errorhandler
 1564: </LocationMatch>
 1565: 
 1566: <LocationMatch "^/adm/selfenroll">
 1567: SetHandler perl-script
 1568: PerlHandler Apache::selfenroll
 1569: ErrorDocument     500 /adm/errorhandler
 1570: </LocationMatch>
 1571: 
 1572: <LocationMatch "^/adm/createaccount">
 1573: SetHandler perl-script
 1574: PerlHandler Apache::createaccount
 1575: ErrorDocument     500 /adm/errorhandler
 1576: </LocationMatch>
 1577: 
 1578: <LocationMatch "^/adm/dns">
 1579: SetHandler perl-script
 1580: PerlHandler Apache::londns
 1581: ErrorDocument     500 /adm/errorhandler
 1582: </LocationMatch>
 1583: 
 1584: <LocationMatch "^/ajax/spellcheck">
 1585: SetHandler perl-script
 1586: PerlHandler Apache::spellcheck
 1587: </LocationMatch>
 1588: 
 1589: <LocationMatch "^/tiny/[\w.-]+/\w+$">
 1590: AuthType LONCAPA
 1591: Require valid-user
 1592: PerlAuthzHandler Apache::lonacc
 1593: SetHandler perl-script
 1594: PerlHandler Apache::lontiny
 1595: ErrorDocument     403 /adm/login
 1596: ErrorDocument     406 /adm/roles
 1597: ErrorDocument     500 /adm/errorhandler
 1598: </LocationMatch>
 1599: 
 1600: # ------------------------------------------------- Backdoor Adm Tests/Programs
 1601: 
 1602: <Location /adm/test>
 1603: PerlAccessHandler Apache::lonstatusacc
 1604: SetHandler perl-script
 1605: PerlHandler Apache::lontest
 1606: </Location>
 1607: 
 1608: # ------------------------------------------------------- Shutting down a child
 1609: 
 1610: PerlChildExitHandler Apache::lonacc::goodbye
 1611: 
 1612: #
 1613: # LON-CAPA Section (extensions to access.conf permission configuration)
 1614: #
 1615: # =========================================================== Directory Options
 1616: 
 1617: # Start out with "no"
 1618: 
 1619: <Directory />
 1620: Options None
 1621: AllowOverride None
 1622: <IfModule mod_authz_core.c>
 1623:   Require all denied
 1624: </IfModule>
 1625: <IfModule !mod_authz_core.c>
 1626:   order deny,allow
 1627:   deny from all
 1628: </IfModule>
 1629: </Directory>
 1630: 
 1631: # Allow uploaded files to be served
 1632: 
 1633: <Directory "/home/httpd/lonUsers">
 1634: Options FollowSymLinks
 1635: AllowOverride None
 1636: <IfModule mod_authz_core.c>
 1637:   Require all granted
 1638: </IfModule>
 1639: <IfModule !mod_authz_core.c>
 1640:   order allow,deny
 1641:   allow from all
 1642: </IfModule>
 1643: </Directory>
 1644:  
 1645: # Yes to symbolic links and server-side includes
 1646: 
 1647: <Directory /home/httpd/html>
 1648: Options FollowSymLinks
 1649: AllowOverride None
 1650: <IfModule mod_authz_core.c>
 1651:   Require all granted
 1652: </IfModule>
 1653: <IfModule !mod_authz_core.c>
 1654:   order allow,deny
 1655:   allow from all
 1656: </IfModule>
 1657: </Directory>
 1658: 
 1659: # If it is in cgi-bin, then it can be executed as a CGI script.
 1660: 
 1661: <Directory /home/httpd/cgi-bin>
 1662: AllowOverride None
 1663: Options ExecCGI FollowSymLinks
 1664: <IfModule mod_authz_core.c>
 1665:   Require all granted
 1666: </IfModule>
 1667: <IfModule !mod_authz_core.c>
 1668:   order allow,deny
 1669:   allow from all
 1670: </IfModule>
 1671: </Directory>
 1672: 
 1673: # Allow serving of files in prtspool
 1674: 
 1675: <Directory "/home/httpd/prtspool/">
 1676: Options FollowSymLinks
 1677: AllowOverride None
 1678: <IfModule mod_authz_core.c>
 1679:   Require all granted
 1680: </IfModule>
 1681: <IfModule !mod_authz_core.c>
 1682:   order allow,deny
 1683:   allow from all
 1684: </IfModule>
 1685: </Directory>
 1686: 
 1687: # Allow serving of files in zipspool
 1688: 
 1689: <Directory "/home/httpd/zipspool/">
 1690: Options FollowSymLinks
 1691: AllowOverride None
 1692: <IfModule mod_authz_core.c>
 1693:   Require all granted
 1694: </IfModule>
 1695: <IfModule !mod_authz_core.c>
 1696:   order allow,deny
 1697:   allow from all
 1698: </IfModule>
 1699: </Directory>
 1700: 
 1701: # Allow serving of files in captchaspool
 1702: 
 1703: <Directory "/home/httpd/captchaspool/">
 1704: Options FollowSymLinks
 1705: AllowOverride None
 1706: <IfModule mod_authz_core.c>
 1707:   Require all granted
 1708: </IfModule>
 1709: <IfModule !mod_authz_core.c>
 1710:   order allow,deny
 1711:   allow from all
 1712: </IfModule>
 1713: </Directory>
 1714: 
 1715: <DirectoryMatch "^/home/httpd/html/priv/.+/">
 1716:    DirectoryIndex disabled
 1717: </DirectoryMatch>
 1718: 
 1719: <DirectoryMatch "^/home/httpd/html/res/.+/">
 1720:    DirectoryIndex disabled
 1721: </DirectoryMatch>
 1722: 
 1723: # ============================================================= Access Handlers
 1724: 
 1725: # ------------------------------------------------- Allow server-status reports
 1726: <Location /server-status>
 1727: PerlAccessHandler Apache::lonstatusacc
 1728: SetHandler server-status
 1729: </Location>
 1730: 
 1731: # ------------------------ Allow LON-CAPA "low-level" connection status reports
 1732: <LocationMatch "^/+lon-status/.*">
 1733: PerlAccessHandler Apache::lonstatusacc
 1734: ErrorDocument     406 /adm/roles
 1735: ErrorDocument     500 /adm/errorhandler
 1736: </LocationMatch>
 1737: 
 1738: # ------------------- Allow access to local system documentation from localhost
 1739: Alias /doc /usr/doc
 1740: <Directory /usr/doc>
 1741: Options Indexes FollowSymLinks
 1742: <IfModule mod_authz_host.c>
 1743:   Require local
 1744: </IfModule>
 1745: <IfModule !mod_authz_host.c>
 1746:   order deny,allow
 1747:   deny from all
 1748:   allow from localhost
 1749: </IfModule>
 1750: </Directory>
 1751: 
 1752: # ******** THESE "SHOULD" NEVER BE ALTERED BY THE USER ************************
 1753: # ====================================== Internal Settings / Perl Configuration
 1754: 
 1755: PerlSetVar	 lonVersion  '<!-- VERSION -->'
 1756: PerlSetVar       lonIDsDir    /home/httpd/lonIDs
 1757: PerlSetVar       lonBalanceDir /home/httpd/balanceIDs
 1758: PerlSetVar       lonDAVsessDir /home/httpd/webdav/sessionIDs
 1759: PerlSetVar       lonTabDir    /home/httpd/lonTabs
 1760: PerlSetVar       lonUsersDir  /home/httpd/lonUsers
 1761: PerlSetVar       lonIconsURL  /adm/lonIcons
 1762: PerlSetVar       londPort     5663
 1763: PerlSetVar       lonSysEMail  techsupport@loncapa.org
 1764: PerlSetVar       lonDaemons   /home/httpd/perl
 1765: PerlSetVar       lonLib       /home/httpd/lib
 1766: PerlSetVar       lonSockDir   /home/httpd/sockets
 1767: PerlSetVar       lonSockCreate   /home/httpd/sockets/common
 1768: PerlSetVar       lonDocRoot   /home/httpd/html
 1769: PerlSetVar       lonPrtDir    /home/httpd/prtspool
 1770: PerlSetVar       lonIncludes  /home/httpd/html/res/adm/includes
 1771: PerlSetVar       lonZipDir    /home/httpd/zipspool
 1772: PerlSetVar       lonCaptchaDir     /home/httpd/captchaspool
 1773: PerlSetVar       lonCaptchaDb     /home/httpd/captchadb 
 1774: PerlSetVar       lonLTIDir    /home/httpd/lonLTItmp
 1775: PerlSetVar       lonFontsDir     /home/httpd/html/adm/fonts
 1776: # & separated list of % separated fields in order of
 1777: # - internal name to call it, 
 1778: # - regexp that it should match (done case-insensitively)
 1779: # - regexp that is should not match (done case-insensitively)
 1780: # - regexp that will pull out the version number into $1
 1781: # - a number that describes the minimum version that has mathml support
 1782: # - a number that describes the minimum number version that has unicode support
 1783: 
 1784: PerlSetVar       lonBrowsDet  explorer%msie%netscape%msie\s(\d+\.\d+)\;%9999%5&mozilla%mozilla\/[5-9]%msie%mozilla\/(\d+\.\d+)\s%9999%1&netscape%netscape%msie%netscape\/(\d+\.\d+)%9999%7&netscape%netscape\/[7-9]%shouldnotmatch%netscape\/(\d+\.\d+)%9999%7&amaya%amaya%mozilla%V(\d+\.\d+)\s%1%1&safari%safari%msie%safari\/([\d\.]+)%9999%84&chrome%chrome%chromeframe%\s+chrome\/(\d+\.\d+)%9999%1&explorer%\s+rv\:\d+\.\d+%firefox%\s+rv\:(\d+\.\d+)%9999%5&opera%\sOPR\/\d+\.\d+%shouldnotmatch%\sOPR\/(\d+\.\d+)%9999%6&opera%^Opera\/9.80\s.+Version\/\d+\.\d+$%shouldnotmatch%Version\/(\d+\.\d+)$%9999%6&opera%^Opera\/\d+\.\d+\s%Version\/\d+\.\d+$%^Opera\/(\d+\.\d+)\s%9999%6
 1785: 
 1786: PerlSetVar       lonTextBrowsers windows\s+ce:lynx
 1787: PerlSetVar       lonScansDir  /home/httpd/scantron
 1788: PerlSetVar       lonScriptTimeout 10
 1789: PerlSetVar	 BugzillaHost	http://bugs.lon-capa.org/
 1790: PerlSetVar	 FAQHost	http://help.lon-capa.org/
 1791: # -----------------------------------------------------------------------------
 1792: # NOTE: lonSqlAccess key is the password for the MySQL user
 1793: # www@localhost.  This value must always be "localhostkey".
 1794: # The only security risk occurs when somebody logs in as 'www' on your system
 1795: # (in which case you have much bigger problems than whether or not they
 1796: # can access the non-authoritative loncapa database on your machine).
 1797: 
 1798: PerlSetVar       lonSqlAccess   localhostkey
 1799: 
 1800: #----------------------------------------------------------------------------
 1801: #
 1802: #   Parameters used by secure lond/lonc
 1803: 
 1804: #
 1805: #   Secure lond/lonc require ssl certificate and private
 1806: #   key files to function correctly.  The certificate
 1807: #   files need not be terribly secure, but the private key files
 1808: #   should be set up so that only www (the lonc/lond effective user)
 1809: #   can read them.
 1810: # 
 1811: #   The definition below is the full path to the directory that
 1812: #   contains the certificate and key files:
 1813: 
 1814: PerlSetVar lonCertificateDirectory /home/httpd/lonCerts
 1815: 
 1816: #
 1817: #  Secure lond/lonc require two certificates and a private host key.
 1818: #  The certificates required are that of the lonCAPA certificate authority
 1819: #  and the certificate that authority issued to this host.
 1820: #  lonnetCertificateAuthority is the name of the file that contains the
 1821: #                            lonCAPA certificate authority's certificate.
 1822: #  lonnetCertificate is the name of the file that contains the certificate
 1823: #                    issued to the host by the certificate authority.
 1824: #  Both of these variables are names of files assumed to be in 
 1825: #  lonCertificateDirectory:
 1826: 
 1827: PerlSetVar lonnetCertificateAuthority loncapaCA.pem
 1828: PerlSetVar lonnetCertificate          lonhostcert.pem
 1829: PerlSetVar lonnetHostnameCertificate  lonhostnamecert.pem
 1830: PerlSetVar lonnetCertRevocationList   loncapaCAcrl.pem
 1831: 
 1832: #
 1833: #  To generate the request for a certificate, and to negotiate the
 1834: #  initial ssl connection, the host requires a private key.  This key
 1835: #  is created at lonCAPA install time.  Did we mention above that it
 1836: #  should be set so that only www can read it?  The variale below
 1837: #  is the name of the file relative to lonnetCertificateDirectory
 1838: #  that has the host's private key.  Did we remember to tell you to
 1839: #  keep the permissions on that file set to rw-------  (0600)?
 1840: #  
 1841: 
 1842: PerlSetVar lonnetPrivateKey         lonKey.pem
 1843: 
 1844: # Did we mention that the file described above must have
 1845: # permissions really locked down so that it can't be stolen?
 1846: 
 1847: #-------------------------------------------------------------------------
 1848: 
 1849: #   Parameters that define where all the ssl stuff is that's needed
 1850: #   to generate certificate requests and, on a system that's a CA
 1851: #   the certificate authority.
 1852: #    
 1853: #    SSLProgram    -> Path to the openssl command
 1854: #    SSLDirectory  -> Directory containing ssl configuration files etc.
 1855: #    SSLCAConfig   -> Name of the SSL config file for the certificate 
 1856: #                     Authority.
 1857: #    SSLCAFile     -> Full path to the Certificate authority file 
 1858: #                    (on the cert manager system).
 1859: #    SSLEmail      -> E-mail address of loncapa certificate manager.
 1860: #    The following are good for the loncapa redhat installs and
 1861: #    the loncapa certificate authority system:
 1862: #
 1863: PerlSetVar SSLProgram	/usr/bin/openssl
 1864: PerlSetVar SSLDirectory /usr/share/ssl
 1865: PerlSetVar SSLCAConfig  loncapaca
 1866: PerlSetVar SSLCAFile    /usr/share/ssl/loncapaca/cacert.pem
 1867: PerlSetVar SSLEmail     certificate@lon-capa.org
 1868: 
 1869: #-------------------------------------------------------------------------
 1870: 
 1871: 
 1872: # ====================================== Include support for SSL rewrites
 1873: 
 1874: Include conf/loncapa_rewrite.conf
 1875: 
 1876: 
 1877: # ====================================== Include machine-specific configuration
 1878: 
 1879: Include conf/loncapa.conf
 1880: 
 1881: # ================================================= Include local configuration
 1882: 
 1883: Include conf/loncapa_apache_local*.conf
 1884: 
 1885: # ================================================== Initiate mod_perl starting
 1886: 
 1887: PerlRequire      conf/startup.pl
 1888: <IfDefine !MODPERL2>
 1889: PerlFreshRestart On
 1890: </IfDefine>

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>