--- loncom/loncapa_apache.conf 2006/04/07 22:28:57 1.128 +++ loncom/loncapa_apache.conf 2016/10/23 18:50:10 1.215.2.18 @@ -1,8 +1,8 @@ ## ## loncapa_apache.conf -- Apache HTTP LON-CAPA configuration file ## -## $Id: loncapa_apache.conf,v 1.128 2006/04/07 22:28:57 albertel Exp $ -## + +# $Id: loncapa_apache.conf,v 1.215.2.18 2016/10/23 18:50:10 raeburn Exp $ # # LON-CAPA Section (extensions to httpd.conf daemon configuration) @@ -18,7 +18,9 @@ Group www # ======================================================= Shared Object Modules -LoadModule perl_module modules/libperl.so + + LoadModule perl_module modules/libperl.so + AddModule mod_perl.c @@ -28,31 +30,53 @@ PerlSetVar MODPERL2 1 # =============================================================== Miscellaneous -ServerAdmin korte@lite.msu.edu +ServerAdmin consortium@loncapa.org ExtendedStatus On # # LON-CAPA Section (extensions to srm.conf name space servicing) # # ===================================================================== Aliases +Alias /zipspool/ /home/httpd/zipspool/ Alias /prtspool/ /home/httpd/prtspool/ +Alias /captchaspool/ /home/httpd/captchaspool/ +Alias /webdav/ /home/httpd/html/priv/ ScriptAlias /cgi-bin/ "/home/httpd/cgi-bin/" + + DAVLockDB /home/httpd/webdav/DAVLock + # ================================================================= Directories # ------------------------------------------------------------- Access Handlers PerlTransHandler Apache::lontrans -PerlCleanupHandler Apache::lonnet::save_cache +PerlCleanupHandler Apache::lonacc::cleanup PerlAuthenHandler Apache::checkauthen PerlSetVar lonOtherAuthen no + + PerlAuthenHandler Apache::lonshibauth + PerlSetVar lonOtherAuthen yes + PerlSetVar lonOtherAuthenType Shibboleth + + #PerlWarn On + +PerlAuthzHandler 'sub { return OK }' + + +# Send proper expires header to avoid unnecessary HTTP request for static content + + ExpiresActive On + ExpiresDefault "access plus 12 hours" + Header set Cache-Control "public, no-transform" + + -#AuthName "LON-CAPA Auth" -AuthType Basic +AuthType LONCAPA Require valid-user PerlAccessHandler Apache::publiccheck @@ -79,23 +103,45 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::portfolio + + + +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::portfolio + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpdfupload +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lontokacc PerlCleanupHandler Apache::lontokacc::removefile -PerlCleanupHandler Apache::lonnet::save_cache +PerlCleanupHandler Apache::lonacc::cleanup -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc +PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck PerlHeaderParserHandler Apache::lonuploadrep ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html @@ -104,7 +150,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc ErrorDocument 403 /adm/login @@ -113,9 +159,24 @@ ErrorDocument 500 /adm/errorhandler -PerlAccessHandler Apache::lonuploadedacc +PerlAuthenHandler Apache::lonuploadedacc +PerlAuthzHandler Apache::lonuploadedacc::skip_phase +PerlAccessHandler Apache::lonuploadedacc::skip_phase + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc + + + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc + SetHandler perl-script @@ -128,7 +189,8 @@ PerlHandler Apache::lonsequence -AuthType Basic +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -138,7 +200,8 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -148,7 +211,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -158,34 +221,38 @@ ErrorDocument 406 /adm/notinit.html ErrorDocument 500 /adm/errorhandler - -AuthType Basic + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script -PerlHandler Apache::lonsimplepage +PerlHandler Apache::lonaboutme ErrorDocument 404 /adm/notfound.html ErrorDocument 406 /adm/notinit.html ErrorDocument 500 /adm/errorhandler - -AuthType Basic + +AuthType LONCAPA Require valid-user -PerlAuthzHandler Apache::lonacc +PerlAuthzHandler Apache::lonacc SetHandler perl-script +PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck PerlHandler Apache::lonsimplepage ErrorDocument 404 /adm/notfound.html ErrorDocument 406 /adm/notinit.html -ErrorDocument 500 /adm/errorhandler +ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck PerlHandler Apache::lonbulletin ErrorDocument 404 /adm/notfound.html ErrorDocument 406 /adm/notinit.html @@ -193,7 +260,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -203,33 +270,57 @@ ErrorDocument 406 /adm/notinit.html ErrorDocument 500 /adm/errorhandler - + +AuthType LONCAPA +Require valid-user PerlAuthzHandler Apache::loncacc SetHandler perl-script -PerlHandler Apache::lonconstruct ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html ErrorDocument 406 /adm/unauthorized ErrorDocument 500 /adm/errorhandler - -PerlAccessHandler Apache::lonracc + + + + AuthType Basic + AuthName "LONCAPA username,domain" + Require valid-user + SSLRequireSSL + PerlAuthenHandler Apache::lonwebdavauth + PerlAuthzHandler Apache::lonwebdavacc + Dav On + DirectoryIndex index.missing + Options Indexes FollowSymLinks + ErrorDocument 403 /adm/nowebdav.html + ErrorDocument 404 /adm/notfound.html + ErrorDocument 406 /adm/unauthorized + ErrorDocument 500 /adm/errorhandler + + + + RewriteEngine on + RewriteRule .* http://%{HTTP_HOST}/adm/nowebdav.html [L] + + + + + + RewriteEngine on + RewriteRule .* http://%{HTTP_HOST}/adm/nowebdav.html [L] + + - -PerlAuthzHandler Apache::loncacc -ErrorDocument 403 /adm/login -ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized -ErrorDocument 500 /adm/errorhandler -AllowOverride None + +PerlAccessHandler Apache::lonracc -AuthType Basic +AuthType LONCAPA Require valid-user -PerlAuthzHandler Apache::lonacc +PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonhelper ErrorDocument 403 /adm/login @@ -239,7 +330,18 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/roles +ErrorDocument 413 /adm/overloaded.txt +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc ErrorDocument 403 /adm/login @@ -250,28 +352,28 @@ ErrorDocument 500 /adm/errorhandler # ------------------------------------------------------------------------- RAT - + SetHandler perl-script PerlHandler Apache::lonratedt - + SetHandler perl-script PerlHandler Apache::lonratedt - + SetHandler perl-script PerlHandler Apache::lonratsrv - + SetHandler perl-script PerlHandler Apache::lonratmenu -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -286,10 +388,10 @@ ErrorDocument 500 /adm/errorhandler SetHandler perl-script PerlHandler Apache::lonindexer PerlCleanupHandler Apache::lonindexer::cleanup -PerlCleanupHandler Apache::lonnet::save_cache +PerlCleanupHandler Apache::lonacc::cleanup - + SetHandler perl-script PerlHandler Apache::lontex @@ -304,42 +406,51 @@ SetHandler perl-script PerlHandler Apache::lonsequence - + +PerlAccessHandler Apache::publiccheck SetHandler perl-script PerlHandler Apache::lonmeta ErrorDocument 413 /adm/overloaded.txt -AuthType Basic +AuthType LONCAPA Require valid-user -SetHandler perl-script PerlAuthzHandler Apache::lonacc +SetHandler perl-script PerlHandler Apache::lonmeta - + SetHandler perl-script PerlHandler Apache::lonrights - + SetHandler perl-script PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck PerlHandler Apache::lonxml - + SetHandler perl-script PerlHandler Apache::lonhomework + +SetHandler perl-script +PerlHandler Apache::lonxml + + -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc +PerlHandler Apache::londatecheck +PerlHandler Apache::lonipcheck SetHandler perl-script PerlHandler Apache::lonwrapper ErrorDocument 403 /adm/login @@ -347,7 +458,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -359,7 +470,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -371,7 +482,7 @@ ErrorDocument 500 /adm/errorhandler # -------------------------------------------------------------- Admin Programs -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -381,7 +492,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -390,8 +501,18 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonsearchcourse +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -402,7 +523,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -413,17 +534,18 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonroles ErrorDocument 403 /adm/login +ErrorDocument 409 /adm/preferences?action=lockwarning ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -433,17 +555,27 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonremote ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpickauthor +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -452,8 +584,19 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpickuser +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -463,7 +606,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -472,27 +615,61 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::londependencies +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + SetHandler perl-script PerlHandler Apache::lonlogin + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::restrictedaccess +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::blockedaccess +ErrorDocument 500 /adm/errorhandler + + -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonlogout ErrorDocument 403 /adm/login +ErrorDocument 409 /adm/preferences?action=lockwarning +ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::switchserver ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler @@ -505,8 +682,23 @@ SetHandler perl-script PerlHandler Apache::migrateuser + + + AuthType shibboleth + ShibUseEnvironment On + ShibRequestSetting requireSession 1 + ShibRequestSetting redirectToSSL 443 + require valid-user + PerlAuthzHandler Apache::lonshibacc + PerlAuthzHandler Apache::lonacc + + + PerlTypeHandler Apache::lonnoshib + + + -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -516,7 +708,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -525,53 +717,43 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler - -AuthType Basic -Require valid-user -PerlAuthzHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::admbookmarks -ErrorDocument 403 /adm/login -ErrorDocument 500 /adm/errorhandler - - -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonpageflip PerlCleanupHandler Apache::lonpageflip::cleanup -PerlCleanupHandler Apache::lonnet::save_cache +PerlCleanupHandler Apache::lonacc::cleanup ErrorDocument 406 /adm/roles ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonambiguous PerlCleanupHandler Apache::lonambiguous::cleanup -PerlCleanupHandler Apache::lonnet::save_cache +PerlCleanupHandler Apache::lonacc::cleanup ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script -PerlHandler Apache::lonmsg +PerlHandler Apache::lonmsgdisplay ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -581,7 +763,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -591,8 +773,19 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::courseprefs +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -603,7 +796,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -614,7 +807,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -624,8 +817,19 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonrequestcourse +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -636,7 +840,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -646,8 +850,28 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::domainprefs +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::lonstatusacc +SetHandler perl-script +PerlHandler Apache::domainstatus +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -658,7 +882,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -669,7 +893,9 @@ ErrorDocument 406 /adm/unauthorized ErrorDocument 500 /adm/errorhandler - + +AuthType LONCAPA +Require valid-user PerlAuthzHandler Apache::loncacc SetHandler perl-script PerlHandler Apache::lonpubdir @@ -679,20 +905,8 @@ ErrorDocument 406 /adm/unauthorized ErrorDocument 500 /adm/errorhandler - -AuthType Basic -Require valid-user -PerlAuthzHandler Apache::lonacc -SetHandler perl-script -PerlHandler Apache::lonpubdir -ErrorDocument 403 /adm/login -ErrorDocument 404 /adm/notfound.html -ErrorDocument 406 /adm/unauthorized -ErrorDocument 500 /adm/errorhandler - - -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -703,7 +917,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -715,7 +929,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -727,7 +941,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -739,7 +953,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -751,7 +965,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -763,7 +977,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -775,7 +989,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -787,7 +1001,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -799,7 +1013,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -811,7 +1025,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -823,7 +1037,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -834,7 +1048,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -845,7 +1059,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -855,8 +1069,30 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::groupboards +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::grouproster +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -867,7 +1103,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -878,7 +1114,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -889,7 +1125,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -900,7 +1136,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -910,19 +1146,31 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::londocs PerlCleanupHandler Apache::londocs::untiehash -PerlCleanupHandler Apache::lonnet::save_cache +PerlCleanupHandler Apache::lonacc::cleanup ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::londocs +PerlCleanupHandler Apache::londocs::untiehash +PerlCleanupHandler Apache::lonacc::cleanup +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -931,18 +1179,28 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler - -AuthType Basic + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonextresedit +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonannounce ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler - + -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -951,7 +1209,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -960,8 +1218,18 @@ ErrorDocument 413 /adm/overloaded.tx ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::longroupchat +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -971,7 +1239,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -981,7 +1249,7 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -991,31 +1259,31 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonsearchcat PerlCleanupHandler Apache::lonsearchcat::cleanup -PerlCleanupHandler Apache::lonnet::save_cache +PerlCleanupHandler Apache::lonacc::cleanup ErrorDocument 403 /adm/login ErrorDocument 413 /adm/overloaded.txt ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script -PerlHandler Apache::lonnavmaps +PerlHandler Apache::lonnavdisplay ErrorDocument 403 /adm/login ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script @@ -1026,122 +1294,152 @@ ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::groupsort PerlCleanupHandler Apache::groupsort::cleanup -PerlCleanupHandler Apache::lonnet::save_cache +PerlCleanupHandler Apache::lonacc::cleanup ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonwishlistdisplay +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonblockingmenu +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::publiccheck +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonblockingstatus + + + +AuthType LONCAPA +Require valid-user +PerlAuthzHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonaccesstimes +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + SetHandler perl-script PerlHandler Apache::lonerrorhandler -AuthType Basic +AuthType LONCAPA Require valid-user +PerlAccessHandler Apache::publiccheck PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonhelp +ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonhelpmenu +ErrorDocument 500 /adm/errorhandler -AuthType Basic +AuthType LONCAPA Require valid-user PerlAuthzHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonsupportreq +ErrorDocument 500 /adm/errorhandler SetHandler perl-script PerlHandler Apache::lonsupportreq +ErrorDocument 500 /adm/errorhandler -# ------------------------------------------------- Backdoor Adm Tests/Programs + +SetHandler perl-script +PerlHandler Apache::loncss +ErrorDocument 500 /adm/errorhandler + - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - + +SetHandler perl-script +PerlHandler Apache::coursecatalog +ErrorDocument 500 /adm/errorhandler + - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - + +SetHandler perl-script +PerlHandler Apache::resetpw +ErrorDocument 500 /adm/errorhandler + - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - + +SetHandler perl-script +PerlHandler Apache::selfenroll +ErrorDocument 500 /adm/errorhandler + - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - + +SetHandler perl-script +PerlHandler Apache::createaccount +ErrorDocument 500 /adm/errorhandler + - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - + +SetHandler perl-script +PerlHandler Apache::londns +ErrorDocument 500 /adm/errorhandler + - -AuthName "harvest" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user reaper - + +SetHandler perl-script +PerlHandler Apache::spellcheck + - -AuthName "Offline" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user offline - - -AuthName "Offline" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user offline - + +# ------------------------------------------------- Backdoor Adm Tests/Programs -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm +PerlAccessHandler Apache::lonstatusacc SetHandler perl-script -PerlAuthzHandler Apache::lonacc PerlHandler Apache::lontest # ------------------------------------------------------- Shutting down a child -PerlChildExitHandler Apache::lonnet::goodbye +PerlChildExitHandler Apache::lonacc::goodbye # # LON-CAPA Section (extensions to access.conf permission configuration) @@ -1153,6 +1451,41 @@ PerlChildExitHandler Apache::lonnet::goo Options None AllowOverride None + + Require all denied + + + order deny,allow + deny from all + + + +# Allow uploaded files to be served + + +Options Includes FollowSymLinks +AllowOverride None + + Require all granted + + + order allow,deny + allow from all + + + +# Allow construction space files to be served + + +Options Includes FollowSymLinks +AllowOverride + + Require all granted + + + order allow,deny + allow from all + # Yes to symbolic links and server-side includes @@ -1160,43 +1493,106 @@ AllowOverride None Options Includes FollowSymLinks AllowOverride None -order allow,deny -allow from all + + Require all granted + + + order allow,deny + allow from all + # If it is in cgi-bin, then it can be executed as a CGI script. AllowOverride None -Options ExecCGI +Options ExecCGI FollowSymLinks + + Require all granted + + + order allow,deny + allow from all + + + +# Allow serving of files in prtspool + + +Options Includes FollowSymLinks +AllowOverride None + + Require all granted + + + order allow,deny + allow from all + +# Allow serving of files in zipspool + + +Options Includes FollowSymLinks +AllowOverride None + + Require all granted + + + order allow,deny + allow from all + + + +# Allow serving of files in captchaspool + + +Options Includes FollowSymLinks +AllowOverride None + + Require all granted + + + order allow,deny + allow from all + + + + + DirectoryIndex disabled + + + + DirectoryIndex disabled + + # ============================================================= Access Handlers # ------------------------------------------------- Allow server-status reports +PerlAccessHandler Apache::lonstatusacc SetHandler server-status -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm # ------------------------ Allow LON-CAPA "low-level" connection status reports - -AuthName "LON-CAPA Network Administration" -AuthType Basic -AuthUserFile /home/httpd/lonTabs/htpasswd -require user lonadm - + +PerlAccessHandler Apache::lonstatusacc +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + # ------------------- Allow access to local system documentation from localhost Alias /doc /usr/doc -order deny,allow -deny from all -allow from localhost Options Indexes FollowSymLinks + + Require local + + + order deny,allow + deny from all + allow from localhost + # ******** THESE "SHOULD" NEVER BE ALTERED BY THE USER ************************ @@ -1204,17 +1600,24 @@ Options Indexes FollowSymLinks PerlSetVar lonVersion '' PerlSetVar lonIDsDir /home/httpd/lonIDs +PerlSetVar lonDAVsessDir /home/httpd/webdav/sessionIDs PerlSetVar lonTabDir /home/httpd/lonTabs PerlSetVar lonUsersDir /home/httpd/lonUsers PerlSetVar lonIconsURL /adm/lonIcons PerlSetVar londPort 5663 -PerlSetVar lonSysEMail korte@lite.msu.edu +PerlSetVar lonSysEMail techsupport@loncapa.org PerlSetVar lonDaemons /home/httpd/perl +PerlSetVar lonLib /home/httpd/lib PerlSetVar lonSockDir /home/httpd/sockets +PerlSetVar lonSockCreate /home/httpd/sockets/common PerlSetVar lonDocRoot /home/httpd/html PerlSetVar lonPrtDir /home/httpd/prtspool PerlSetVar lonIncludes /home/httpd/html/res/adm/includes -# & sepeareted list of : seperated fileds inorder of +PerlSetVar lonZipDir /home/httpd/zipspool +PerlSetVar lonCaptchaDir /home/httpd/captchaspool +PerlSetVar lonCaptchaDb /home/httpd/captchadb +PerlSetVar lonFontsDir /home/httpd/html/adm/fonts +# & separated list of % separated fields in order of # - internal name to call it, # - regexp that it should match (done case-insensitively) # - regexp that is should not match (done case-insensitively) @@ -1222,7 +1625,7 @@ PerlSetVar lonIncludes /home/http # - a number that describes the minimum version that has mathml support # - a number that describes the minimum number version that has unicode support -PerlSetVar lonBrowsDet explorer:msie:netscape:msie\s(\d+\.\d+)\;:9999:9999&mozilla:mozilla\/[5-9]:msie:mozilla\/(\d+\.\d+)\s:9999:1&netscape:netscape:msie:netscape\/(\d+\.\d+):9999:7&netscape:netscape\/[7-9]:shouldnotmatch:netscape\/(\d+\.\d+):9999:7&amaya:amaya:mozilla:V(\d+\.\d+)\s:1:1&safari:safari:msie:safari\/([\d\.]+):9999:84 +PerlSetVar lonBrowsDet explorer%msie%netscape%msie\s(\d+\.\d+)\;%9999%5&mozilla%mozilla\/[5-9]%msie%mozilla\/(\d+\.\d+)\s%9999%1&netscape%netscape%msie%netscape\/(\d+\.\d+)%9999%7&netscape%netscape\/[7-9]%shouldnotmatch%netscape\/(\d+\.\d+)%9999%7&amaya%amaya%mozilla%V(\d+\.\d+)\s%1%1&safari%safari%msie%safari\/([\d\.]+)%9999%84&chrome%chrome%chromeframe%\s+chrome\/(\d+\.\d+)%9999%1&explorer%\s+rv\:\d+\.\d+%firefox%\s+rv\:(\d+\.\d+)%9999%5&opera%\sOPR\/\d+\.\d+%shouldnotmatch%\sOPR\/(\d+\.\d+)%9999%6&opera%^Opera\/9.80\s.+Version\/\d+\.\d+$%shouldnotmatch%Version\/(\d+\.\d+)$%9999%6&opera%^Opera\/\d+\.\d+\s%Version\/\d+\.\d+$%^Opera\/(\d+\.\d+)\s%9999%6 PerlSetVar lonTextBrowsers windows\s+ce:lynx PerlSetVar lonScansDir /home/httpd/scantron @@ -1238,12 +1641,6 @@ PerlSetVar FAQHost http://help.lon-capa PerlSetVar lonSqlAccess localhostkey -# ----------------------------------------------------------------------------- -# lonttpdPort is the port used by the lightweight graphics httpd server -# not the main Apache server -PerlSetVar lonhttpdPort 8080 - - #---------------------------------------------------------------------------- # # Parameters used by secure lond/lonc @@ -1314,6 +1711,9 @@ PerlSetVar SSLEmail certificate@lon- #------------------------------------------------------------------------- +# ====================================== Include support for SSL rewrites + +Include conf/loncapa_rewrite.conf # ====================================== Include machine-specific configuration