--- loncom/loncapa_apache.conf 2003/09/16 18:29:23 1.59.2.2 +++ loncom/loncapa_apache.conf 2004/09/22 16:56:23 1.96 @@ -1,7 +1,7 @@ ## ## loncapa_apache.conf -- Apache HTTP LON-CAPA configuration file ## -## $Id: loncapa_apache.conf,v 1.59.2.2 2003/09/16 18:29:23 albertel Exp $ +## $Id: loncapa_apache.conf,v 1.96 2004/09/22 16:56:23 albertel Exp $ ## # @@ -23,6 +23,9 @@ LoadModule perl_module modules/lib AddModule mod_perl.c + +PerlSetVar MODPERL2 1 + # =============================================================== Miscellaneous ServerAdmin korte@lite.msu.edu @@ -40,6 +43,7 @@ ScriptAlias /cgi-bin/ "/home/httpd/cgi-b # ------------------------------------------------------------- Access Handlers PerlTransHandler Apache::lontrans +PerlCleanupHandler Apache::lonnet::save_cache #PerlWarn On @@ -51,17 +55,51 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonenc +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::portfolio + + + +SetHandler perl-script +PerlHandler Apache::portfolio + + + + PerlAccessHandler Apache::lontokacc PerlCleanupHandler Apache::lontokacc::removefile -PerlAccessHandler Apache::lonuploadedacc +PerlAccessHandler Apache::lonacc +PerlHeaderParserHandler Apache::lonuploadrep +ErrorDocument 403 /adm/login ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +SetHandler perl-script +PerlHandler Apache::lonpage + + + +SetHandler perl-script +PerlHandler Apache::lonsequence + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -91,6 +129,7 @@ ErrorDocument 500 /adm/errorhandler PerlAccessHandler Apache::lonacc SetHandler perl-script +PerlHandler Apache::londatecheck PerlHandler Apache::lonbulletin ErrorDocument 404 /adm/notfound.html ErrorDocument 406 /adm/notinit.html @@ -184,28 +223,37 @@ SetHandler perl-script PerlHandler Apache::lontex - + SetHandler perl-script PerlHandler Apache::lonpage - + SetHandler perl-script PerlHandler Apache::lonsequence - + +SetHandler perl-script +PerlHandler Apache::lonmeta + + + SetHandler perl-script +PerlAccessHandler Apache::lonacc PerlHandler Apache::lonmeta - + + + SetHandler perl-script PerlHandler Apache::lonrights - + SetHandler perl-script +PerlHandler Apache::londatecheck PerlHandler Apache::lonxml @@ -222,6 +270,24 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonsource +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonlocal +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + # -------------------------------------------------------------- Admin Programs @@ -232,6 +298,14 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::imagechoice +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -241,6 +315,15 @@ ErrorDocument 413 /adm/overloaded.tx ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lontrackstudent +ErrorDocument 403 /adm/login +ErrorDocument 413 /adm/overloaded.txt +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -281,6 +364,14 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpickcode +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + SetHandler perl-script PerlHandler Apache::lonlogin @@ -306,6 +397,14 @@ ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonspeller +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -377,6 +476,15 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonmodifycourse +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -465,6 +573,26 @@ ErrorDocument 406 /adm/unauthorized ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::imsimport +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/unauthorized +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::testbankimport +ErrorDocument 403 /adm/login +ErrorDocument 404 /adm/notfound.html +ErrorDocument 406 /adm/unauthorized +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -504,6 +632,24 @@ ErrorDocument 406 /adm/roles ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonviewclasslist +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonpopulate +ErrorDocument 403 /adm/login +ErrorDocument 406 /adm/roles +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -533,12 +679,20 @@ ErrorDocument 500 /adm/errorhandler PerlAccessHandler Apache::lonacc SetHandler perl-script -PerlCleanupHandler Apache::londocs::untiehash PerlHandler Apache::londocs + PerlCleanupHandler Apache::londocs::untiehash ErrorDocument 403 /adm/login ErrorDocument 500 /adm/errorhandler + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::imsimportdocs +ErrorDocument 403 /adm/login +ErrorDocument 500 /adm/errorhandler + + PerlAccessHandler Apache::lonacc SetHandler perl-script @@ -638,10 +792,23 @@ PerlHandler Apache::lonerrorhandler +PerlAccessHandler Apache::lonacc SetHandler perl-script PerlHandler Apache::lonhelp + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonhelpmenu + + + +PerlAccessHandler Apache::lonacc +SetHandler perl-script +PerlHandler Apache::lonsupportreq + + # ------------------------------------------------- Backdoor Adm Tests/Programs @@ -686,6 +853,20 @@ AuthUserFile /home/httpd/lonTabs/htpassw require user reaper + +AuthName "Offline" +AuthType Basic +AuthUserFile /home/httpd/lonTabs/htpasswd +require user offline + + + +AuthName "Offline" +AuthType Basic +AuthUserFile /home/httpd/lonTabs/htpasswd +require user offline + + AuthName "LON-CAPA Network Administration" AuthType Basic @@ -774,6 +955,8 @@ PerlSetVar lonBrowsDet netscape:m PerlSetVar lonTextBrowsers opera:windows\s+ce:lynx PerlSetVar lonScansDir /home/httpd/scantron PerlSetVar lonScriptTimeout 10 +PerlSetVar BugzillaHost http://bugs.lon-capa.org/ +PerlSetVar FAQHost http://help.lon-capa.org/ # ----------------------------------------------------------------------------- # NOTE: lonSqlAccess key is the password for the MySQL user # www@localhost. This value must always be "localhostkey". @@ -789,6 +972,77 @@ PerlSetVar lonSqlAccess localhos PerlSetVar lonhttpdPort 8080 +#---------------------------------------------------------------------------- +# +# Parameters used by secure lond/lonc + +# +# Secure lond/lonc require ssl certificate and private +# key files to function correctly. The certificate +# files need not be terribly secure, but the private key files +# should be set up so that only www (the lonc/lond effective user) +# can read them. +# +# The definition below is the full path to the directory that +# contains the certificate and key files: + +PerlSetVar lonCertificateDirectory /home/httpd/lonCerts + +# +# Secure lond/lonc require two certificates and a private host key. +# The certificates required are that of the lonCAPA certificate authority +# and the certificate that authority issued to this host. +# lonnetCertificateAuthority is the name of the file that contains the +# lonCAPA certificate authority's certificate. +# lonnetCertificate is the name of the file that contains the certificate +# issued to the host by the certificate authority. +# Both of these variables are names of files assumed to be in +# lonCertificateDirectory: + +PerlSetVar lonnetCertificateAuthority loncapaCA.pem +PerlSetVar lonnetCertificate lonhostcert.pem + +# +# To generate the request for a certificate, and to negotiate the +# initial ssl connection, the host requires a private key. This key +# is created at lonCAPA install time. Did we mention above that it +# should be set so that only www can read it? The variale below +# is the name of the file relative to lonnetCertificateDirectory +# that has the host's private key. Did we remember to tell you to +# keep the permissions on that file set to rw------- (0600)? +# + +PerlSetVar lonnetPrivateKey lonKey.pem + +# Did we mention that the file described above must have +# permissions really locked down so that it can't be stolen? + +#------------------------------------------------------------------------- + +# Parameters that define where all the ssl stuff is that's needed +# to generate certificate requests and, on a system that's a CA +# the certificate authority. +# +# SSLProgram -> Path to the openssl command +# SSLDirectory -> Directory containing ssl configuration files etc. +# SSLCAConfig -> Name of the SSL config file for the certificate +# Authority. +# SSLCAFile -> Full path to the Certificate authority file +# (on the cert manager system). +# SSLEmail -> E-mail address of loncapa certificate manager. +# The following are good for the loncapa redhat installs and +# the loncapa certificate authority system: +# +PerlSetVar SSLProgram /usr/bin/openssl +PerlSetVar SSLDirectory /usr/share/ssl +PerlSetVar SSLCAConfig loncapaca +PerlSetVar SSLCAFile /usr/share/ssl/loncapaca/cacert.pem +PerlSetVar SSLEmail certificate@lon-capa.org + +#------------------------------------------------------------------------- + + + # ====================================== Include machine-specific configuration