## modified for LearningOnline Network
## Gerd Kortemeyer
##
## 7/8,7/10,7/14,11/22,01/06,01/20,01/21,5/29,5/31,7/1,7/10,8/22,8/29
##
## Scott Harrison
##
## 9/21,9/23
##
## Gerd Kortemeyer
##
## 10/3,10/5,10/12,10/16,10/20,11/2,11/6
##
## access.conf -- Apache HTTP server configuration file
##

# access.conf: Global access configuration
# Online docs at http://www.apache.org/

# This file defines server settings which affect which types of services
# are allowed, and in what circumstances. 

# Each directory to which Apache has access, can be configured with respect
# to which services and features are allowed and/or disabled in that
# directory (and its subdirectories). 

# Originally by Rob McCool

# First, we configure the "default" to be a very restrictive set of 
# permissions.  

<Directory />
Options None
AllowOverride None
</Directory>

# Note that from this point forward you must specifically allow
# particular features to be enabled - so if something's not working as
# you might expect, make sure that you have specifically enabled it
# below.

# This should be changed to whatever you set DocumentRoot to.

<Directory /home/httpd/html>

# This may also be "None", "All", or any combination of "Indexes",
# "Includes", "FollowSymLinks", "ExecCGI", or "MultiViews".

# Note that "MultiViews" must be named *explicitly* --- "Options All"
# doesn't give it to you.

Options Includes FollowSymLinks

# This controls which options the .htaccess files in directories can
# override. Can also be "All", or any combination of "Options", "FileInfo", 
# "AuthConfig", and "Limit"

AllowOverride None

# Controls who can get stuff from this server.

order allow,deny
allow from all

</Directory>

# /home/httpd/cgi-bin should be changed to whatever your ScriptAliased
# CGI directory exists, if you have that configured.

<Directory /home/httpd/cgi-bin>
AllowOverride None
Options ExecCGI
</Directory>

# Allow server status reports, with the URL of http://servername/server-status
# Change the ".your_domain.com" to match your domain to enable.

<Location /server-status>
SetHandler server-status
AuthName "HTTPD Server Status"
AuthType Basic
AuthUserFile /home/httpd/lonTabs/htpasswd
require user lonadm
</Location>

<Location /lon-status>
AuthName "LON Server Status"
AuthType Basic
AuthUserFile /home/httpd/lonTabs/htpasswd
require user lonadm
</Location>

# Allow access to local system documentation from localhost
Alias /doc /usr/doc
<Directory /usr/doc>
order deny,allow
deny from all
allow from localhost
Options Indexes FollowSymLinks
</Directory>

# There have been reports of people trying to abuse an old bug from pre-1.1
# days.  This bug involved a CGI script distributed as a part of Apache.
# By uncommenting these lines you can redirect these attacks to a logging 
# script on phf.apache.org.  Or, you can record them yourself, using the script
# support/phf_abuse_log.cgi.

#<Location /cgi-bin/phf*>
#deny from all
#ErrorDocument 403 http://phf.apache.org/phf_abuse_log.cgi
#</Location>

# You may place any other directories or locations you wish to have
# access information for after this one.


# ------------------------------------------------------------ Machine Specific
#
# The variable values are also read and shared by lond

# LON-internal HostID of this machine

PerlSetVar       lonHostID    {[[[[lonHostID]]]]}
 
# Role of this machine: library, access

PerlSetVar       lonRole      {[[[[lonRole]]]]}

# Server Administration

PerlSetVar       lonAdmEMail  {[[[[lonAdmEMail]]]]}

# Default domain

PerlSetVar       lonDefDomain {[[[[lonDefDomain]]]]}

# Load Limit ( 100% loadavg )

PerlSetVar       lonLoadLim   {[[[[lonLoadLim]]]]}

# Expiration for local copies in seconds

PerlSetVar       lonExpire    {[[[[lonExpire]]]]}

# ----------------------------------------------------------- Internal Settings

PerlSetVar       lonIDsDir    /home/httpd/lonIDs
PerlSetVar       lonTabDir    /home/httpd/lonTabs
PerlSetVar       lonUsersDir  /home/httpd/lonUsers
PerlSetVar       lonIconsURL  /adm/lonIcons
PerlSetVar       londPort     5663
PerlSetVar       lonSysEMail  korte@lite.msu.edu
PerlSetVar       lonDaemons   /home/httpd/perl
PerlSetVar       lonSockDir   /home/httpd/sockets
PerlSetVar       lonDocRoot   /home/httpd/html
PerlSetVar       lonIncludes  /home/httpd/html/res/adm/includes
PerlSetVar       lonBrowsDet  netscape:mozilla:msie:mozilla\/(\d+\.\d+)\s:5.1&explorer:msie:netscape:msie\s(\d+\.\d+)\;:9999&mozilla:mozilla\/[5-9]:msie:mozilla\/(\d+\.\d+)\s:5&amaya:amaya:mozilla:V(\d+\.\d+)\s:1

# ------------------------------------------------------------ Perl Information

PerlRequire      conf/startup.pl
PerlFreshRestart On

# ================================================================= Directories

# ------------------------------------------------------------- Access Handlers

<LocationMatch "^/res.*">
PerlAccessHandler       Apache::lonacc
PerlHeaderParserHandler Apache::lonrep
ErrorDocument     403 /adm/login
ErrorDocument     404 /adm/notfound.html
ErrorDocument     406 /adm/roles
</LocationMatch>

<LocationMatch "^/raw.*">
PerlAccessHandler Apache::lonracc
</LocationMatch>

<LocationMatch "^/\~.*">
PerlAccessHandler Apache::loncacc
ErrorDocument     403 /adm/login
ErrorDocument     404 /adm/notfound.html
ErrorDocument     406 /adm/unauthorized.html
</LocationMatch>

# ------------------------------------------------------------------------- RAT

<LocationMatch "^/\~.*\.sequence$">
SetHandler perl-script
PerlHandler Apache::lonratedt
</LocationMatch>

<LocationMatch "^/\~.*\.page$">
SetHandler perl-script
PerlHandler Apache::lonratedt
</LocationMatch>

<LocationMatch "^/\~.*\/ratserver$">
SetHandler perl-script
PerlHandler Apache::lonratsrv
</LocationMatch>

# --------------------------------------------- Resource Space Content Handlers

<LocationMatch "^/res/.*/$">
SetHandler perl-script
PerlHandler Apache::lonindexer
</LocationMatch>

<LocationMatch "^/res/.*\.tex$">
SetHandler perl-script
PerlHandler Apache::lontex
</LocationMatch>

<LocationMatch "^/res/.*\.page$>
SetHandler perl-script
PerlHandler Apache::lonpage
</LocationMatch>

<LocationMatch "^/res/.*\.sequence$>
SetHandler perl-script
PerlHandler Apache::lonsequence
</LocationMatch>

<LocationMatch "^/res/.*\.meta$>
SetHandler perl-script
PerlHandler Apache::lonmeta
</LocationMatch>

<LocationMatch "^/res/.*\.(xml|html|htm|xhtml|xhtm)$">
SetHandler perl-script
PerlHandler Apache::lonxml
</LocationMatch>

<LocationMatch "^/res/.*\.problem$">
SetHandler perl-script
PerlHandler Apache::lonhomework
</LocationMatch>

# -------------------------------------------------------------- Admin Programs

<Location /adm/roles>
PerlAccessHandler       Apache::lonacc
SetHandler perl-script
PerlHandler Apache::lonroles
ErrorDocument     403 /adm/login
</Location>

<Location /adm/login>
SetHandler perl-script
PerlHandler Apache::lonlogin
</Location>

<Location /adm/logout>
PerlAccessHandler       Apache::lonacc
SetHandler perl-script
PerlHandler Apache::lonlogout
ErrorDocument     403 /adm/login
</Location>

<Location /adm/authenticate>
SetHandler perl-script
PerlHandler Apache::lonauth
</Location>

<Location /adm/annotations>
PerlAccessHandler       Apache::lonacc
SetHandler perl-script
PerlHandler Apache::admannotations
ErrorDocument     403 /adm/login
</Location>

<Location /adm/bookmarks>
PerlAccessHandler       Apache::lonacc
SetHandler perl-script
PerlHandler Apache::admbookmarks
ErrorDocument     403 /adm/login
</Location>

<Location /adm/flip>
PerlAccessHandler       Apache::lonacc
SetHandler perl-script
PerlHandler Apache::lonpageflip
ErrorDocument     406 /adm/roles
ErrorDocument     403 /adm/login
</Location>

<Location /adm/ambiguous>
PerlAccessHandler       Apache::lonacc
SetHandler perl-script
PerlHandler Apache::lonambiguous
ErrorDocument     403 /adm/login
</Location>

<LocationMatch "^/adm/email/">
PerlAccessHandler       Apache::lonacc
SetHandler perl-script
PerlHandler Apache::lonmsg
ErrorDocument     403 /adm/login
</LocationMatch>

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>500 Internal Server Error</title>
</head><body>
<h1>Internal Server Error</h1>
<p>The server encountered an internal error or
misconfiguration and was unable to complete
your request.</p>
<p>Please contact the server administrator at 
 root@localhost to inform them of the time this error occurred,
 and the actions you performed just before this error.</p>
<p>More information about this error may be available
in the server error log.</p>
</body></html>